Permission Escalation Vulnerability in Fortra File Integrity Monitoring

CVE-2026-12164

What is CVE-2026-12164?

Fortra File Integrity Monitoring (FIM), previously known as Tripwire Enterprise, is affected by a vulnerability that may lead to incorrect or elevated effective permissions for users when created through the tetool import command while FIM is actively running. This is especially concerning when the import process involves the creation or modification of roles and their associated permissions, potentially compromising the security posture of the system.

References