CVE-2026-45171
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
In Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, there is incomplete input validation and improperly configured folder permissions, allowing an authenticated low-privileged user to potentially execute arbitrary code.
Risk Assessment
The organization may be exposed to arbitrary code execution by low-privileged users, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to the latest version of Idira PSM to mitigate these security vulnerabilities and review folder permission configurations.
Original NVD description (English source)
Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an authenticated, low-privileged user could potentially execute arbitrary code. CyberArk Security Bulletin: CA26-17 and CA26-18