File Overwrite Vulnerability in Cisco ThousandEyes Enterprise Agent

CVE-2026-20161

What is CVE-2026-20161?

A vulnerability has been identified in the CLI of Cisco ThousandEyes Enterprise Agent that could enable an authenticated, local attacker with limited privileges to overwrite arbitrary files on the system of an affected device. This issue arises from inadequate access controls that govern file permissions within the local file system. By placing a symbolic link in a designated location, an attacker may exploit this flaw to circumvent file system restrictions, potentially compromising system integrity. It's critical for users to be aware of this vulnerability and implement necessary mitigations.

References