CVE-2026-9489 is a local privilege escalation vulnerability in Acer NitroSense V3 (version 3.01.3001 and earlier). The vulnerability arises from a misconfigured Windows Named Pipe that exposes a custom protocol to invoke internal functions without proper access restrictions. This allows authenticated local users to execute arbitrary code and delete arbitrary files with NT AUTHORITY\SYSTEM privileges. The issue involves CWE-22 (Path Traversal), CWE-269 (Improper Privilege Management), CWE-284 (Improper Access Control), and CWE-732 (Incorrect Permission Assignment). The CVSS 4.0 base score is 8.5, indicating high severity.

Exploitation of this vulnerability enables an authenticated local attacker to gain SYSTEM-level privileges on the affected machine, allowing arbitrary code execution and deletion of files with elevated rights. This can lead to full system compromise, unauthorized modification or destruction of data, and potential persistence of malicious code with the highest privilege level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Until a patch is available, restrict local user access to trusted individuals only and monitor for suspicious activity related to NitroSense Named Pipe usage.