← Back to search

CVE-2026-79806

7.8 HIGH

Published 2026-10-06 · Updated 2026-10-08

AI risk analysis

Summary
A privilege escalation vulnerability in ClearPass Policy Manager's OnGuard Linux agent allows local users to escalate their privileges to root, potentially enabling full system compromise. This flaw affects Linux clients running the agent and could be exploited by attackers who already have user-level access.
Exploitability
Exploitation requires local access to a Linux client running the ClearPass OnGuard agent with existing user credentials, making it moderately difficult to achieve but not highly complex.
Blast radius
If exploited, this vulnerability could lead to complete system compromise across all affected Linux clients, potentially allowing attackers to access sensitive data, modify system configurations, or establish persistent backdoors.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to ClearPass Policy Manager version 2.590 or later to address this privilege escalation vulnerability.
priv-esclinuxclearpass

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit allows a malicious user to escalate to root privileges on the affected Linux client.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-269

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.