Privilege Escalation Vulnerability in WatchGuard Agent for Windows

CVE-2026-41288

What is CVE-2026-41288?

A vulnerability exists in the patch management component of the WatchGuard Agent on Windows, where incorrect permission assignments allow an authenticated local user to elevate their privileges to NT AUTHORITY\SYSTEM. This security flaw poses a significant risk, enabling potential attackers to gain unauthorized access and control over system-level operations, thereby compromising the integrity and security of the affected system.

References