CVE-2026-77477

Name of the Vulnerable Software and Affected Versions OPCFoundation OPC UA LocalDiscoveryServer versions prior to 1.04.420

Description A privilege-escalation flaw exists in the installer that allows local attackers with keyboard and display access to intercept a high-privilege console during installation. This allows the execution of arbitrary commands by leveraging the installer's elevated context, which could potentially enable pivoting to connected industrial systems. This issue affects industrial control systems across the chemical, energy, food and agriculture, water and wastewater, and critical manufacturing sectors.

Recommendations Update to version 1.04.420 or later. Implement runtime segmentation to contain post-compromise activity in OT environments.