CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 25, 2026 · NIST NVD

   Detected

   CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs

2. Jun 17, 2026 · NIST NVD

   Updated

   CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs

Affected

• cpe cyberark/endpoint privilege managerversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-2914

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-2914

  CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs

  nvd.nist.gov

References

• Release Notes · docs.cyberark.com
• Permissions Required · cyberark.com