This vulnerability (CVE-2026-45174) affects the Idira Endpoint Privilege Manager Linux Agent from CyberArk Software, a Palo Alto Networks Company. It is classified under CWE-404, indicating improper resource shutdown or release. The issue allows a local attacker with limited privileges to potentially compromise the initialization process of the agent daemon. The CVSS 4.0 base score is 8.5, reflecting high impact with local attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. The affected version explicitly identified is 26.0. No official patch or remediation guidance has been provided by the vendor as of the published date.

A local attacker with limited privileges can exploit this vulnerability to compromise the initialization of the Idira Endpoint Privilege Manager agent daemon on Linux systems. This could lead to unauthorized actions affecting confidentiality, integrity, and availability of the agent's operations. There is no evidence of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory (CyberArk Security Bulletin: CA26-19) for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to the agent daemon initialization. No official remediation level or temporary fix has been published by the vendor.