CyberArk Endpoint Privilege Manager Agent Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the CyberArk Endpoint Privilege Manager (EPM) Agent for Windows, macOS, and Linux, all prior to version 25.10.0. This vulnerability allows a local user to elevate privileges by manipulating the policies associated with an Administration task.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.

Remediation

CyberArk recommends that all customers upgrade to Endpoint Privilege Manager Agent version 25.12.0 or later.