Uncontrolled Search Path Vulnerability in Illumio VEN for Windows
CVE-2026-114032

7.8HIGH

Key Information:

Vendor

Illumio

Status
Core Ven
Vendor
CVE Published:
9 November 2026

What is CVE-2026-114032?

The Illumio VEN for Windows includes a vulnerable version of the OpenSSL library that is susceptible to an uncontrolled search path issue. This flaw allows low-privileged, authenticated local attackers to exploit this vulnerability to execute arbitrary code with elevated SYSTEM privileges. It highlights the importance of proper configuration and secure loading practices in software libraries to mitigate unauthorized access and potential system compromise.

Affected Version(s)

Core Ven Windows 24.2.20 < 26.2.20

References

https://product-docs-repo.illumio.com/Tech-Docs/Security+...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.