This vulnerability in SecureAge CatchPulse involves improper access control that permits a local attacker without administrative privileges to connect to a kernel filter communication port that lacks proper restrictions. By doing so, the attacker can bypass the security policy enforcement mechanisms of CatchPulse. The CVSS v3.1 score is 8.4, reflecting high impact on integrity and availability, with low attack complexity and no user interaction required. The vulnerability was published on 2026-08-06, with no vendor advisory or patch information provided yet.

A local attacker with limited privileges can bypass security policy enforcement in CatchPulse, potentially leading to unauthorized actions that compromise system integrity and availability. Confidentiality impact is not indicated. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious local activity related to CatchPulse. Avoid granting unnecessary local user privileges.