CyberArk PSMP CVE-2026-45172

Attacker must hold valid credentials for a low-privileged PSMP user (CVSS PR:L) and reach the PSMP SSH listener over the network (AV:N, AC:L, UI:N); no special non-default configuration is called out by the vendor, so any deployment of PSMP prior to 15.0.2 / 14.6.3 / 14.2.5 / 14.0.6 that accepts authenticated SSH connections is in scope. Exploitation is limited by the need for that authenticated PSMP session, by network reachability to the PSMP host (typically segmented behind a jump tier), and by whichever directory/group restrictions the operator has placed on PSMP login; impact is bounded to the PSMP host itself per the CVSS 4.0 SC:N/SI:N/SA:N subsequent-system metrics, although in practice PSMP's role makes that host a high-value pivot.

The CVSS 4.0 vector AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L describes a remotely reachable, low-complexity attack requiring only a low-privileged authenticated PSMP user and no user interaction, with high impact on confidentiality and integrity of the PSMP host and low availability impact; subsequent-system impact is N, which is conservative given PSMP's role bridging to managed targets. There is no EPSS score, KEV listing, or public PoC referenced in the input, so exploitation pressure today appears low, but the prerequisite - any authenticated PSMP user - is realistic in the threat models PSMP is deployed against (insider, compromised vendor account, phished operator). For organizations using PSMP, this is a real priority rather than a paper-tiger high CVSS: the affected component sits at the center of the privileged-access trust boundary, so even a low-privileged foothold yields outsized impact. No EPSS, KEV, or PoC data was provided, so widespread opportunistic exploitation cannot be inferred either way.

An attacker who already holds a low-privileged PSMP account - for example a contractor, a phished operator, or a stolen service credential - connects to PSMP over SSH and supplies a crafted target, username, or session parameter that contains shell metacharacters. PSMP's incomplete input validation lets that payload reach a command-execution context on the PSMP host itself, giving the attacker arbitrary command execution under the PSMP service account, from which they can read recorded session data, tamper with brokered sessions, or pivot toward the wider PAM infrastructure. No public exploit identified at time of analysis.