Idira Endpoint Privilege Manager Agent versions before 26.5 contain an improper privilege management vulnerability (CWE-269) in high-privileged components. A local attacker with low privileges could exploit this flaw by interfering with internal communication mechanisms or file operations, potentially bypassing permission checks and gaining unauthorized elevated local privileges. The vulnerability has a CVSS 4.0 score of 8.9, indicating high severity. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation could allow a local attacker with low privileges to bypass permission restrictions and perform unauthorized actions with elevated privileges on the affected system. This could lead to unauthorized local privilege escalation, increasing the attacker's control over the system.

Patch status is not yet confirmed — check the vendor advisory (CyberArk Security Bulletin: CA26-19) for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious local activity related to the Idira Endpoint Privilege Manager Agent.