CVE-2026-45171
Idira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Input Validation
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an authenticated, low-privileged user could potentially execute arbitrary code. CyberArk Security Bulletin: CA26-17 and CA26-18
| CWE | CWE-22 |
| Vendor | cyberark software, a palo alto networks company |
| Product | privileged session manager, vault |
| Published | Jun 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for cyberark software, a palo alto networks company privileged session manager, vault
Be the first to know when new unknown vulnerabilities affecting cyberark software, a palo alto networks company privileged session manager, vault are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
CyberArk Software, a Palo Alto Networks Company / Privileged Session Manager, Vault
14.0 < 14.0.5 14.2 < 14.2.5 14.6 < 14.6.3 15.0 < 15.0.3
References
docs.cyberark.com: https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew15-0-psm.htm#15.0.3 docs.cyberark.com: https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-6-psm.htm#14.6.3 docs.cyberark.com: https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-2-5.htm docs.cyberark.com: https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-0-5.htm
Credits
Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue