Privilege Escalation Vulnerability in Nessus Agent Tray App on Windows
CVE-2025-36640

7.3HIGH

Key Information:

Vendor

Tenable

Status
Nessus Agent
Vendor
CVE Published:
13 January 2026

What is CVE-2025-36640?

A vulnerability has been identified in the installation and uninstallation processes of the Nessus Agent Tray App on Windows hosts, which could allow an attacker to escalate their privileges. This flaw could potentially enable unauthorized users to gain elevated access to the system, posing significant security risks. Users of the affected versions should take immediate action by applying the recommended patches to secure their environments.

Affected Version(s)

Nessus Agent Windows 0 < 10.9.3

Nessus Agent Windows 11.0.0 < 11.0.2

References

https://www.tenable.com/security/tns-2026-01

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.