CVE-2026-111184

Name of the Vulnerable Software and Affected Versions NoMachine (affected versions not specified)

Description A local privilege escalation flaw exists in the NoMachine Device Service due to incorrect permissions assigned to a named pipe. A named pipe is a mechanism for inter-process communication. An attacker who has already obtained the ability to execute low-privileged code on the target system can exploit this issue to escalate their privileges and execute arbitrary code with SYSTEM level permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.