Use-After-Free Vulnerability in Akamai Guardicore Platform Agent

CVE-2026-50217

What is CVE-2026-50217?

A use-after-free vulnerability in the Windows WFP callout driver of the Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to induce a system crash through a specially crafted outbound ICMPv6 packet. This packet, when it contains an IPv6 Hop-by-Hop extension header, can exploit the freed buffer allocated size, leading to potential denial of service conditions. The risk increases when the non-default IPv6 ICMP capture/redirect policy is enabled on the endpoint, making it essential for users to review their configurations to mitigate this threat.

References