CVE Catalog

CVE-2026-2449

Critical
Published: Translated: NVD NIST

Summary

An argument injection vulnerability in upKeeper Instant Privilege Access allows hijacking a privileged thread of execution. The issue affects versions through 1.5.0.

Risk Assessment

An attacker could hijack a privileged thread, potentially leading to privilege escalation and compromise of system integrity.

Recommendation

Update upKeeper Instant Privilege Access to the latest available version that includes the fix.

Original NVD description (English source)

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affects upKeeper Instant Privilege Access: through 1.5.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS