Tenable Agent Code Execution Vulnerability with SYSTEM Privileges on Windows

A vulnerability in Tenable Agent for Windows, affecting versions prior to 10.8.5, allows non-administrative users to execute code with SYSTEM privileges. This issue could lead to unauthorized access or modifications at a high privilege level, potentially allowing for further exploitation or damage.

Impact

Exploitation of this vulnerability allows for arbitrary code execution with SYSTEM privileges, enabling a non-administrative user to perform actions or access resources that are typically restricted.

Remediation

Users can upgrade to Tenable Agent version 10.8.5 to address this vulnerability. The installation files are available from the Tenable Downloads Portal.