The vulnerability CVE-2026-6788 in WatchGuard Agent on Windows involves an uncontrolled search path element, which can be exploited by an attacker with local privileges to use malicious files. This issue affects versions before 1.25.03.0000. The CVSS 4.0 base score is 8.5, indicating high severity, with attack vector local, low attack complexity, no user interaction required, and high impact on confidentiality, integrity, and availability. No official remediation level or patch links have been published by WatchGuard as of now.

An attacker with local privileges could exploit this vulnerability to execute or load malicious files due to the improper search path handling in the WatchGuard Agent. This could lead to significant compromise of confidentiality, integrity, and availability of the affected system. However, there are no known active exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, users should monitor WatchGuard advisories for updates. Until a fix is available, limit local access to trusted users and consider additional local security controls to mitigate risk.