CyberArk Endpoint Privilege Manager CVE-2026-45176

Attacker must already be able to execute code as a local low-privileged user on a host running CyberArk Endpoint Privilege Manager Agent prior to version 26.5 (Windows, macOS, or Linux), and must be able to reach the agent's internal IPC mechanism or a file path the high-privileged agent component operates on. Exploitation is limited by CVSS AC:H, indicating specific circumstances (such as a race condition window, predictable file path/handle, or a particular policy/deployment mode of the agent) must be present; no user interaction is required (UI:N) and no agent-side authentication token is needed (PR:N at the CVSS level), but remote-only attackers without an existing endpoint foothold cannot reach the vulnerable interface.

The CVSS 4.0 vector (AV:L/AC:H/AT:N/PR:N/UI:N, VC:H/VI:H/VA:H, SC:H/SI:H/SA:H) describes a local, unauthenticated, high-complexity attack with high impact to both the vulnerable system and subsequent systems, scoring 8.9. Local AV plus PR:N is consistent with any interactive or low-priv process on the box being able to attempt the attack, but AC:H signals that specific race conditions or environmental prerequisites must be met, reducing reliability. There is no CISA KEV listing, no public POC, and no EPSS provided, so this is currently no public exploit identified at time of analysis - risk is driven by the nature of the target (a privilege-management product, so compromise = full bypass of an intended security control across the fleet) rather than active exploitation. Treat as high priority specifically for organizations using EPM as a UAC/sudo replacement, lower priority where it is not deployed or is already patched.

An attacker who has obtained a low-privileged foothold on an endpoint - for example, via phishing-delivered malware running in the user's session - locates the EPM agent's local IPC endpoint or a file path the SYSTEM/root agent operates on, and sends crafted messages or wins a race to manipulate the file operation so the privileged agent performs an action on the attacker's behalf, yielding SYSTEM/root code execution. With elevation achieved, the attacker disables endpoint controls, harvests credentials from LSASS/keychain, and pivots; no public POC is currently available, and AC:H indicates the attack is non-trivial to weaponize reliably.