Crowdstrike
Monthly
Command injection in the AiSOC actions service (AiSOC 7.2.0 up to, but excluding, 12.0.0) allows a low-privileged authenticated user to break out of quoted arguments in the file_path, path, script_name, or script_args parameters and execute arbitrary commands with SYSTEM/root privileges on CrowdStrike-managed endpoints. Exploitation requires that the deployment expose the actions service, that at least one CrowdStrike-managed endpoint is enrolled so a Real Time Response (RTR) session can be established, and that a mutating endpoint action (quarantine_file/rm, the automatic post-quarantine path_exists/ls probe, or a runscript path) is reachable with attacker-controlled input. No public exploit identified at time of analysis, and the practical weight of this flaw is tempered mainly by the small footprint of AiSOC deployments rather than by technical severity; note that the vendor's own fix commit documents that on default installs the dedicated actions-service token was never generated and its guard exempted itself while AISOC_DEV_MODE was enabled, so mutating routes could respond to anyone able to reach the port - materially lowering the authentication barrier described by the CVSS PR:L metric.
Local privilege escalation in the CrowdStrike Falcon sensor for Windows occurs when the Microsoft Office File Malicious Macro Removal policy setting is enabled, letting an unprivileged process race the sensor's macro-cleanup file operation (CWE-367) and write arbitrary files to protected locations, ultimately reaching SYSTEM-level privileges. Affected builds are the Falcon sensor for Windows at 7.34 and above, the 7.32 LTS line, and 7.16 on Windows 7/2008 R2; the CrowdStrike Laroux Malware Cleanup Tool is also affected, while Mac, Linux, and Legacy sensor platforms are not. No public exploit identified at time of analysis and the issue is not listed in CISA KEV, though the CVSS 3.1 base score is 8.8.
Local privilege escalation in the Pi coding agent (npm packages @earendil-works/pi-coding-agent 0.74.0-0.78.0 and @mariozechner/pi-coding-agent 0.50.0-0.73.1) allows a co-resident attacker on a shared Linux host to pre-stage attacker-controlled extension code in a predictable `os.tmpdir()/pi-extensions` path that pi later loads as the victim user. No public exploit identified at time of analysis, but the issue was reported by CrowdStrike researchers and patched in 0.78.1 of the renamed package. Affects shared dev boxes, CI runners, and HPC login nodes; Windows/macOS default per-user temp directories typically avoid exposure.
Unauthenticated path traversal in CrowdStrike LogScale cluster API allows remote attackers to read arbitrary files from server filesystems. Affects only self-hosted LogScale deployments with specific vulnerable versions; Next-Gen SIEM customers are not impacted. CrowdStrike proactively identified this during internal testing and deployed network-layer blocks for SaaS customers on April 7, 2026, with log analysis confirming no evidence of exploitation. CVSS 9.8 critical severity with network vector and no authentication required (AV:N/PR:N), though EPSS and KEV data not available at time of analysis.
Cleartext exposure of document passwords in the CrowdStrike OAuth API app for Splunk SOAR (versions below 5.1.3) allows any authenticated user with action-running permissions to read sensitive document_password values directly from the Splunk SOAR user interface. The root cause is the app's failure to mark the document_password parameter as a password type in both the detonate file and detonate url actions, meaning the platform's built-in masking mechanism is never invoked. Vendor patch version 5.1.3 has been released and confirmed via Splunk advisory SVD-2026-0806; no public exploit code or active exploitation has been identified at time of analysis.
Credential disclosure in Pi coding agent affects all versions of @mariozechner/pi-coding-agent (>=0.28.0, <=0.73.1) and @earendil-works/pi-coding-agent (>=0.74.0, <0.78.1) due to a TOCTOU race condition in auth.json file writes. The credential storage code wrote auth.json with umask-inherited permissions and only subsequently tightened the mode to owner-only, leaving a brief window in which a local user with directory traverse access could read API keys, OAuth access tokens, and OAuth refresh tokens. This is not remotely exploitable; no public exploit identified at time of analysis, and the vendor CVSS of 2.2 reflects the strict local and timing prerequisites.
Stored XSS in the HTML session export feature of pi-coding-agent allows script execution in an exported document when a user clicks a crafted Markdown link. Affected npm packages (@mariozechner/pi-coding-agent 0.27.5–0.73.1 and @earendil-works/pi-coding-agent 0.74.0–0.78.0) either omitted URL scheme validation entirely or implemented a blocklist that could be defeated by prepending C0 control characters (bytes 0x00–0x1F), which browsers silently strip before navigation. No public exploit is identified at time of analysis and this vulnerability is not in CISA KEV; the CVSS score of 2.5 and local attack vector reflect the multi-step, user-dependent exploitation chain discovered and responsibly disclosed by CrowdStrike researchers.
Arbitrary file deletion in the CrowdStrike Falcon sensor for Windows (versions before 7.24) requires an attacker to already have the ability to execute low-privileged code on the host. The flaw is a local logic/origin-validation error (CWE-346) that can delete files outside the attacker's normal authorization; Mac, Linux, and Legacy sensors are unaffected, and no public exploit identified at time of analysis. EPSS is 0.17% (6th percentile), consistent with a moderate-severity, defense-in-depth issue rather than an urgent priority.
Arbitrary file deletion in the CrowdStrike Falcon sensor for Windows (versions below 7.24) is possible when an attacker who already has the ability to execute code on the host wins a race condition in the sensor's file-handling path. The issue is local-only (AV:L, PR:L) and timing-dependent (AC:H), so it does not expose the host to a remote attacker and offers no direct path to data theft or code modification - its only rated effect is loss of availability through deleted files. CrowdStrike fixed the flaw in Falcon sensor for Windows 7.24 and above and in all Long Term Visibility (LTV) sensors; there is no public exploit code and no confirmed active exploitation at time of analysis, and the EPSS score is negligible at roughly 0.12% (2nd percentile).
Credential disclosure in Elastic Kibana's Crowdstrike connector lets an authenticated user who can create and run connectors in one Kibana space read cached Crowdstrike credentials belonging to a connector configured in a different space. Exploitation requires a pre-existing Crowdstrike connector with cached credentials elsewhere in the deployment and a multi-space setup, so single-space or Crowdstrike-connector-free installations are not exposed. The issue carries a CVSS of 5.4 and a very low EPSS of 0.23% (13th percentile); no public exploit code has been identified and the flaw is not in CISA KEV, making this a moderate, authenticated information-disclosure risk rather than an emergency.
A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Command injection in the AiSOC actions service (AiSOC 7.2.0 up to, but excluding, 12.0.0) allows a low-privileged authenticated user to break out of quoted arguments in the file_path, path, script_name, or script_args parameters and execute arbitrary commands with SYSTEM/root privileges on CrowdStrike-managed endpoints. Exploitation requires that the deployment expose the actions service, that at least one CrowdStrike-managed endpoint is enrolled so a Real Time Response (RTR) session can be established, and that a mutating endpoint action (quarantine_file/rm, the automatic post-quarantine path_exists/ls probe, or a runscript path) is reachable with attacker-controlled input. No public exploit identified at time of analysis, and the practical weight of this flaw is tempered mainly by the small footprint of AiSOC deployments rather than by technical severity; note that the vendor's own fix commit documents that on default installs the dedicated actions-service token was never generated and its guard exempted itself while AISOC_DEV_MODE was enabled, so mutating routes could respond to anyone able to reach the port - materially lowering the authentication barrier described by the CVSS PR:L metric.
Local privilege escalation in the CrowdStrike Falcon sensor for Windows occurs when the Microsoft Office File Malicious Macro Removal policy setting is enabled, letting an unprivileged process race the sensor's macro-cleanup file operation (CWE-367) and write arbitrary files to protected locations, ultimately reaching SYSTEM-level privileges. Affected builds are the Falcon sensor for Windows at 7.34 and above, the 7.32 LTS line, and 7.16 on Windows 7/2008 R2; the CrowdStrike Laroux Malware Cleanup Tool is also affected, while Mac, Linux, and Legacy sensor platforms are not. No public exploit identified at time of analysis and the issue is not listed in CISA KEV, though the CVSS 3.1 base score is 8.8.
Local privilege escalation in the Pi coding agent (npm packages @earendil-works/pi-coding-agent 0.74.0-0.78.0 and @mariozechner/pi-coding-agent 0.50.0-0.73.1) allows a co-resident attacker on a shared Linux host to pre-stage attacker-controlled extension code in a predictable `os.tmpdir()/pi-extensions` path that pi later loads as the victim user. No public exploit identified at time of analysis, but the issue was reported by CrowdStrike researchers and patched in 0.78.1 of the renamed package. Affects shared dev boxes, CI runners, and HPC login nodes; Windows/macOS default per-user temp directories typically avoid exposure.
Unauthenticated path traversal in CrowdStrike LogScale cluster API allows remote attackers to read arbitrary files from server filesystems. Affects only self-hosted LogScale deployments with specific vulnerable versions; Next-Gen SIEM customers are not impacted. CrowdStrike proactively identified this during internal testing and deployed network-layer blocks for SaaS customers on April 7, 2026, with log analysis confirming no evidence of exploitation. CVSS 9.8 critical severity with network vector and no authentication required (AV:N/PR:N), though EPSS and KEV data not available at time of analysis.
Cleartext exposure of document passwords in the CrowdStrike OAuth API app for Splunk SOAR (versions below 5.1.3) allows any authenticated user with action-running permissions to read sensitive document_password values directly from the Splunk SOAR user interface. The root cause is the app's failure to mark the document_password parameter as a password type in both the detonate file and detonate url actions, meaning the platform's built-in masking mechanism is never invoked. Vendor patch version 5.1.3 has been released and confirmed via Splunk advisory SVD-2026-0806; no public exploit code or active exploitation has been identified at time of analysis.
Credential disclosure in Pi coding agent affects all versions of @mariozechner/pi-coding-agent (>=0.28.0, <=0.73.1) and @earendil-works/pi-coding-agent (>=0.74.0, <0.78.1) due to a TOCTOU race condition in auth.json file writes. The credential storage code wrote auth.json with umask-inherited permissions and only subsequently tightened the mode to owner-only, leaving a brief window in which a local user with directory traverse access could read API keys, OAuth access tokens, and OAuth refresh tokens. This is not remotely exploitable; no public exploit identified at time of analysis, and the vendor CVSS of 2.2 reflects the strict local and timing prerequisites.
Stored XSS in the HTML session export feature of pi-coding-agent allows script execution in an exported document when a user clicks a crafted Markdown link. Affected npm packages (@mariozechner/pi-coding-agent 0.27.5–0.73.1 and @earendil-works/pi-coding-agent 0.74.0–0.78.0) either omitted URL scheme validation entirely or implemented a blocklist that could be defeated by prepending C0 control characters (bytes 0x00–0x1F), which browsers silently strip before navigation. No public exploit is identified at time of analysis and this vulnerability is not in CISA KEV; the CVSS score of 2.5 and local attack vector reflect the multi-step, user-dependent exploitation chain discovered and responsibly disclosed by CrowdStrike researchers.
Arbitrary file deletion in the CrowdStrike Falcon sensor for Windows (versions before 7.24) requires an attacker to already have the ability to execute low-privileged code on the host. The flaw is a local logic/origin-validation error (CWE-346) that can delete files outside the attacker's normal authorization; Mac, Linux, and Legacy sensors are unaffected, and no public exploit identified at time of analysis. EPSS is 0.17% (6th percentile), consistent with a moderate-severity, defense-in-depth issue rather than an urgent priority.
Arbitrary file deletion in the CrowdStrike Falcon sensor for Windows (versions below 7.24) is possible when an attacker who already has the ability to execute code on the host wins a race condition in the sensor's file-handling path. The issue is local-only (AV:L, PR:L) and timing-dependent (AC:H), so it does not expose the host to a remote attacker and offers no direct path to data theft or code modification - its only rated effect is loss of availability through deleted files. CrowdStrike fixed the flaw in Falcon sensor for Windows 7.24 and above and in all Long Term Visibility (LTV) sensors; there is no public exploit code and no confirmed active exploitation at time of analysis, and the EPSS score is negligible at roughly 0.12% (2nd percentile).
Credential disclosure in Elastic Kibana's Crowdstrike connector lets an authenticated user who can create and run connectors in one Kibana space read cached Crowdstrike credentials belonging to a connector configured in a different space. Exploitation requires a pre-existing Crowdstrike connector with cached credentials elsewhere in the deployment and a multi-space setup, so single-space or Crowdstrike-connector-free installations are not exposed. The issue carries a CVSS of 5.4 and a very low EPSS of 0.23% (13th percentile); no public exploit code has been identified and the flaw is not in CISA KEV, making this a moderate, authenticated information-disclosure risk rather than an emergency.
A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.