CVE-2026-104629

Summary

A component loading mechanism in openPDC and openHistorian allows authenticated attackers to execute arbitrary constructor code by loading invalid components, running with the privileges of the service account. This creates a high-impact privilege escalation vulnerability.

Exploitability

Exploitation requires an authenticated user account and filesystem write access to place malicious files, making it moderately difficult but achievable in environments where users can upload or modify files on the host system.

Blast radius

If exploited, this vulnerability could allow attackers to execute arbitrary code as the service account, potentially leading to full system compromise, data exfiltration, or disruption of critical infrastructure operations.

Detection

Monitor for unusual file creation or modification in directories where openPDC/openHistorian components are loaded, particularly looking for new .dll or .exe files that could be loaded as components. Also monitor for process execution patterns that might indicate component loading from unexpected locations.

Prioritized remediation

Upgrade to openPDC version 2.590 or later and openHistorian version 2.590 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.