Local Privilege Escalation Vulnerability in Sandisk Dashboard from Sandisk

CVE-2026-114594

What is CVE-2026-114594?

A time-of-check to time-of-use (TOCTOU) race condition has been identified in the Sandisk Dashboard installer, which could enable a local authenticated standard user to replace a binary file in a writable temporary directory prior to its execution. This vulnerability allows an attacker to execute a modified binary with elevated administrative privileges, potentially compromising the system's integrity and security. This issue affects the Sandisk Dashboard up to version 5.2.2.3.

References