Code Injection Vulnerability in Taegis Endpoint Agent by Sophos
CVE-2024-13861

7.8HIGH

Key Information:

Vendor

Sophos
Status
Taegis Endpoint Agent (linux)
Vendor
CVE Published:
11 April 2025

What is CVE-2024-13861?

A code injection vulnerability exists in the Debian package component of the Taegis Endpoint Agent for Linux, allowing local users to execute arbitrary code with root privileges. This affects versions prior to 1.3.10. Systems based on Redhat using RPM packages remain unaffected. It is crucial for users to update to the latest version to protect against potential exploitation scenarios.

Affected Version(s)

Taegis Endpoint Agent (Linux) 0 < 1.3.10

References

https://www.sophos.com/en-us/security-advisories/sophos-s...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-13861 : Code Injection Vulnerability in Taegis Endpoint Agent by Sophos