CVE-2026-9128

Name of the Vulnerable Software and Affected Versions Studio 5000 Logix Designer (affected versions not specified)

Description A code execution issue exists in the External Tools module due to an unquoted search path in the configuration. Because executable paths specified in the external tools configuration file are not properly quoted and contain spaces, the operating system may resolve them to unintended executables placed earlier in the search order. An attacker could plant a malicious executable within the search path to achieve arbitrary code execution with the permissions of the user running the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.