CVE-2026-92817
The Ignition Perspective module does not properly validate session privileges when determining Designer-level access.
Published Oct 13, 2026 · updated Oct 14, 2026
The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker could exploit these elevated privileges to execute arbitrary code in the context of the Ignition Gateway process.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · Catalog
Detected
The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker could exploit these elevated privileges to execute arbitrary code in the context of the Ignition Gateway process.
Oct 14, 2026 · NIST NVD
Updated
The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker could exploit these elevated privileges to execute arbitrary code in the context of the Ignition Gateway process.
Oct 14, 2026 · NIST NVD
Updated
The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker could exploit these elevated privileges to execute arbitrary code in the context of the Ignition Gateway process.
Sources
- CVE.orgCVE-2026-92817
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-92817
30-day exploitation probability 0.5%
first.org - NIST NVDCVE-2026-92817
The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker could ex
nvd.nist.gov