PT-2026-49301 · Kandji · Kandji Agent

·

CVE-2026-39118

·

Published

2026-06-15

·

Updated

2026-07-18

CVSS v3.1

8.4

High

VectorAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Kandji Agent versions prior to 4.7.5(5374)
Description A client validation gap in the software allows a local attacker to escalate privileges and invoke restricted agent functionality.
Recommendations Update to version 4.7.5(5374) or later.

Fix

LPE

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-39118

Affected Products

Kandji Agent