The vulnerability CVE-2026-55979 in SecureAge CatchPulse arises from an improper access control check in the product's named pipe communication interface. This weakness could permit an attacker with local access and low privileges to invoke CatchPulse functions that are normally subject to stricter security policies. The CVSS 3.1 base score is 5.2, reflecting a medium severity with local attack vector, low attack complexity, low privileges required, no user interaction, scope change, limited confidentiality impact, no integrity impact, and low availability impact. There is no vendor advisory or patch information available at this time.

An attacker with local access and low privileges could exploit this vulnerability to invoke certain CatchPulse functions that enforce more restrictive security policies, potentially leading to limited confidentiality loss and partial availability degradation. There is no indication of integrity impact or remote exploitation. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious activity related to CatchPulse named pipe communications.