High · 8.5 CVE-2026-2914 EUVD-2026-8579GHSA-vfwc-g9gj-ppmx

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk e…

Published Feb 25, 2026 · Updated May 10, 2026 · Assigned by palo_alto

Vendor: CyberArk Software, a Palo Alto Networks Company Product: Endpoint Privilege Manager Agent

Description

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs

Affected products

Vendor	Product	Affected	Fixed
CyberArk Software, a Palo Alto Networks Company	Endpoint Privilege Manager Agent	25.10 – < 25.12	25.12

References

https://www.cyberark.com/product-security/
https://docs.cyberark.com/epm/latest/en/content/release%20notes/release-notes.htm