Local Privilege Escalation Vulnerability in NoMachine by NoMachine
CVE-2026-5054
7.8HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-5054?
This vulnerability in NoMachine involves improper validation of user-supplied file paths during command line operations. Local attackers can exploit this flaw by executing low-privileged code, leading to unauthorized privilege escalation and the potential execution of arbitrary code within a root context. This poses significant risks to the integrity and confidentiality of the affected systems.
Affected Version(s)
NoMachine 9.3.7
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.