Local Privilege Escalation in NoMachine Device Service

CVE-2026-111184

What is CVE-2026-111184?

A vulnerability exists in the NoMachine Device Service due to improper permissions assigned to a named pipe. This flaw allows local attackers, who already have access to execute low-privileged code on the system, to escalate their privileges and execute arbitrary code with SYSTEM-level rights. The issue highlights the importance of correct permissions management to prevent unauthorized access and exploitation.

References