This vulnerability (CVE-2026-45174) affects the Idira Endpoint Privilege Manager Linux Agent version 26.0. It is classified under CWE-404, indicating improper resource shutdown or release. The flaw allows a local attacker with limited privileges to potentially interfere with the initialization process of the agent daemon, which could lead to compromise of the agent's operation. The CVSS 4.0 base score is 8.5, reflecting high severity with local attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. No official fix or patch has been documented in the provided data, and no exploits are currently known in the wild.

A local attacker with limited privileges could exploit this vulnerability to compromise the initialization of the Idira Endpoint Privilege Manager agent daemon. This could result in unauthorized control or disruption of the agent, potentially affecting system security and management functions. The high CVSS score indicates significant impact on confidentiality, integrity, and availability of the affected system components.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation or patch has been provided, users should monitor CyberArk's security bulletins for updates. Until a fix is available, limiting local access to trusted users and applying standard privilege management best practices may reduce risk.