Local Privilege Escalation Vulnerability in Omnissa Workspace ONE Tunnel for Windows
CVE-2026-22927

7.8HIGH

Key Information:

Vendor

Omnissa

Status
Omnissa Workspace One® Tunnel For Windows
Vendor
CVE Published:
8 July 2026

What is CVE-2026-22927?

The Omnissa Workspace ONE Tunnel for Windows is susceptible to a local privilege escalation vulnerability. This flaw can potentially enable a local attacker to execute arbitrary code with elevated privileges, thereby compromising the system's integrity and security. Users are urged to apply the latest updates to safeguard against potential exploitation. Further information can be found in the official security response documents.

Affected Version(s)

Omnissa Workspace ONE® Tunnel for Windows Omnissa Workspace ONE® Tunnel for Windows prior to 26.03

References

https://www.omnissa.com/omsa-2026-0002
https://www.omnissa.com/omnissa-security-response/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.