Local Privilege Escalation Vulnerability in Acer NitroSense Software

CVE-2026-9789

What is CVE-2026-9789?

A Local Privilege Escalation vulnerability in Acer NitroSense software arises from the PSAdminAgent service's implementation, which establishes a Named Pipe with insufficiently strict Access Control List (ACL) settings. This flaw permits any authenticated local user to interact with the service and issue commands without appropriate privilege checks. As a result, an attacker with low-level privileges can execute file deletion commands, potentially leading to the unauthorized removal of critical system files, which poses significant security risks to affected systems.

References