Permission Assignment Flaw in WatchGuard Agent Affects User Log Integrity

CVE-2026-115253

What is CVE-2026-115253?

A vulnerability in the WatchGuard Agent's log directory arises from improper permission assignments. This flaw enables local, authenticated users lacking administrative privileges to create, modify, append, or delete log files associated with the agent. Consequently, an attacker can manipulate or erase essential security logs, potentially masking their activities or facilitating other local attacks by depositing executable content within a directory controlled by a privileged service. This issue underscores the critical need for stringent permission settings to safeguard sensitive log information from unauthorized access.

References