EUVD-2026-72684
GHSA-3pwx-5g7f-2mvm
Severity by source
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:X/RE:L/U:Amber
Local low-privilege access suffices; scope changes to root via sudo escalation, yielding full CIA impact on the host and managed environment.
Primary rating from Vendor (AlgoSec).
CVSS VectorVendor: AlgoSec
Lifecycle Timeline
1DescriptionCVE.org
Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection.
A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.
This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.
AnalysisAI
Privilege escalation in AlgoSec Horizon Security Analyzer (versions A33.10/A33.20/A33.30 on Linux 64-bit) allows a low-privileged local user to gain elevated - likely root - access by injecting malicious parameters into a command approved in the sudoers file. The root cause (CWE-266, Improper Privilege Management) is insufficient restriction of arguments permitted when invoking the sudo-approved command, enabling a classic parameter injection attack. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires (1) a valid local operating-system account on the Linux host running Horizon Security Analyzer - remote unauthenticated exploitation is not possible - and (2) the presence of the specific sudoers configuration entry installed by the Horizon Security Analyzer product, which is the attack requirement reflected by AT:P in the CVSS 4.0 vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-supplied CVSS 4.0 score of 6.1 reflects the local-only attack vector (AV:L), a specific attack requirement (AT:P - the sudoers entry must be present as installed by the product), and an active user interaction requirement (UI:A). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Horizon Security Analyzer to a build beyond the affected thresholds: A33.10 build 301 or later, A33.20 build 171 or later, or A33.30 build 111 or later, per the vendor advisory at https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-266 – Incorrect Privilege Assignment
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today