CVE-2026-58885

Summary

A confused deputy vulnerability in multiple locations allows an unprivileged local attacker to bypass permission checks and gain full local privileges without user interaction or additional privileges.

Exploitability

Exploitation requires local access and no additional privileges; the high CVSS score indicates it is straightforward for a local attacker.

Blast radius

Successful exploitation grants full local control over confidentiality, integrity, and availability of the affected system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the vendor patch referenced in the official advisory; since no fixed version is published in the description, follow the specific vendor guidance to disable or restrict the affected confused deputy pathways until a patch is available.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.