CVE-2026-45206 is a vulnerability classified as CWE-346 (Origin Validation Error) affecting Trend Micro's Apex One/SEP agent, specifically version 2019 (14.0). The flaw involves improper origin validation in a process protection communication mechanism, distinct from a similar vulnerability CVE-2026-45207. This weakness could allow a local attacker with low privileges, who already has code execution capability, to escalate their privileges on the affected system. The CVSS v3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

A local attacker with the ability to execute low-privileged code on a system running the affected version of Trend Micro Apex One/SEP agent could exploit this vulnerability to escalate privileges. This could lead to full system compromise, affecting confidentiality, integrity, and availability of the system. The vulnerability does not allow remote exploitation and requires prior local access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious local activity related to the Apex One agent. Avoid deploying untrusted code on affected systems.