CVE-2026-90441

Name of the Vulnerable Software and Affected Versions wgagent (affected versions not specified)

Description A missing authorization issue in the session initialization function of the wgagent management daemon allows an authenticated user with low privileges, such as a guest or read-only administrator, to cause a crash of the wgagent process. Additionally, this flaw enables the reading of arbitrary files accessible to the daemon through a specially crafted management API request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.