This vulnerability in Broadcom Automic Automation Agent on multiple Unix and Linux platforms allows programs to execute with more privileges than necessary, which can lead to privilege escalation. It affects all versions before 24.4.4 HF1. The CVSS 4.0 base score is 8.5, reflecting high severity with local attack vector, low attack complexity, and no user interaction required. The vulnerability impacts confidentiality, integrity, and availability to a high degree. No official remediation level or patch information is provided, and the product is not a cloud service, so remediation depends on vendor patch releases.

Successful exploitation could allow an attacker with limited privileges to escalate their privileges on affected systems, potentially gaining elevated access to execute code or commands with higher privileges. This could compromise system confidentiality, integrity, and availability. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is provided, users should monitor Broadcom's advisories for updates. Until a patch is available, restrict access to the affected Automic Automation Agent installations to trusted users only and apply the principle of least privilege to limit potential exploitation.