CVE-2026-12164
Privilege Escalation in Fortra File Integrity Monitoring (FIM)
CVSS Score
4.4
EPSS Score
0.0%
EPSS Percentile
0th
Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.
| CWE | CWE-266 |
| Vendor | fortra |
| Product | file integrity monitoring (fim) |
| Published | Jun 23, 2026 |
| Last Updated | Jun 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for fortra file integrity monitoring (fim)
Be the first to know when new medium vulnerabilities affecting fortra file integrity monitoring (fim) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Affected Versions
Fortra / File Integrity Monitoring (FIM)
0 < 9.4.0