This vulnerability (CVE-2026-77654) in Algosec Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) affects Linux 64-bit versions A33.10, A33.20, and A33.30. It is classified as CWE-266 (Incorrect Privilege Assignment). A local user with command line access can exploit improper privilege management by manipulating parameters of a command allowed by sudoers, leading to privilege escalation and parameter injection. The CVSS 4.0 vector indicates local attack vector, low attack complexity, partial privileges required, user interaction needed, and high impact on confidentiality, integrity, availability, and system components. No known exploits are reported in the wild, and no vendor remediation or patch is currently documented.

A local user with command line access can escalate their privileges on the affected system by abusing parameters of a sudo-approved command. This could lead to unauthorized access to higher privilege levels and potential parameter injection, compromising system security. The impact affects confidentiality, integrity, and availability with high severity components as per the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user access to the command line and review sudoers configurations to limit abuse of commands with elevated privileges. Monitor for vendor updates regarding patches or official mitigations.