The vulnerability CVE-2026-45169 affects CyberArk's PAM SH Vault in versions before 15.0.3, 14.6.5, 14.2.7, and 14.0.8. It arises from insufficient validation of input under specific configurations, which may lead to unexpected service termination and localized denial of service. The CVSS 4.0 base score is 8.7, reflecting high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability. The issue is classified as CWE-400 (Uncontrolled Resource Consumption). There is no vendor advisory or patch information available at this time.

Successful exploitation of this vulnerability can cause the PAM SH Vault service to terminate unexpectedly, resulting in a localized denial of service. This disrupts availability of the privileged access management service, potentially impacting security operations that depend on it. There is no indication of confidentiality or integrity impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for unusual service terminations and consider implementing input validation or filtering at network boundaries if feasible. Avoid exposing vulnerable versions to untrusted networks. Follow CyberArk's security bulletins for updates.