Skip to content
OpenAdvisories
Medium · 4.4 CVE-2026-12164 EUVD-2026-38636GHSA-3x8g-cjc2-45qp

Privilege Escalation in Fortra File Integrity Monitoring (FIM)

Published Jun 23, 2026 · Updated Jun 24, 2026 · Assigned by Fortra

Description

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.

Affected products

VendorProductAffectedFixed
Fortra File Integrity Monitoring (FIM) < 9.4.0 9.4.0

Advisories 1

References