Local Privilege Escalation Vulnerability in Pyrus Sync for Windows

CVE-2026-116596

What is CVE-2026-116596?

Pyrus Sync for Windows is vulnerable to local privilege escalation due to inadequate authorization controls within its PyrusSyncService. This flaw allows attackers with unprivileged access to exploit the ISyncService contract, potentially enabling them to create arbitrary files and escalate their privileges on the system. This vulnerability could lead to unauthorized actions that compromise system integrity and confidentiality.

References