Skip to content
OpenAdvisories
High · 7.8 CVE-2024-13861 EUVD-2024-54397GHSA-fgww-7769-w5pf

A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux) versions older than 1.3.10 allows local use…

Published Apr 11, 2025 · Updated Feb 26, 2026 · Assigned by Sophos

Vendor: Sophos Product: Taegis Endpoint Agent (Linux) Platform: Linux Category: Network devices

Description

A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux) versions older than 1.3.10 allows local users arbitrary code execution as root. Redhat-based systems using RPM packages are not affected.

Affected products

VendorProductAffectedFixed
Sophos Taegis Endpoint Agent (Linux) < 1.3.10 1.3.10

References