CVE-2026-40145

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-40145", "assignerOrgId": "13061848-ea10-403d-bd75-c83a022c2891", "state": "PUBLISHED", "assignerShortName": "BT", "dateReserved": "2026-04-09T18:39:27.757Z", "datePublished": "2026-08-17T16:29:12.385Z", "dateUpdated": "2026-08-17T18:17:49.348Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "13061848-ea10-403d-bd75-c83a022c2891", "shortName": "BT", "dateUpdated": "2026-08-17T16:29:12.385Z"}, "title": "Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-1220", "description": "CWE-1220 Insufficient granularity of access control", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-1", "descriptions": [{"lang": "en", "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}], "affected": [{"vendor": "BeyondTrust", "product": "Endpoint Privilege Management (Windows deployment)", "platforms": ["Windows"], "versions": [{"status": "affected", "version": "0", "lessThan": "26.1.2", "versionType": "cpe"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A vulnerability exists in the interaction between a Endpoint Privilege Management\u00a0(Windows\u00a0Deployment)\u00a0support\u00a0utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended. "}]}], "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40145"}, {"url": "https://www.beyondtrust.com/trust-center/security-advisories/bt26-04"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "HIGH", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-17T18:16:53.700643Z", "id": "CVE-2026-40145", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-17T18:17:49.348Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-40145", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-17T18:16:53.700643Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-17T18:17:26.115Z"}}], "cna": {"title": "Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-1", "descriptions": [{"lang": "en", "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "BeyondTrust", "product": "Endpoint Privilege Management (Windows deployment)", "versions": [{"status": "affected", "version": "0", "lessThan": "26.1.2", "versionType": "cpe"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40145"}, {"url": "https://www.beyondtrust.com/trust-center/security-advisories/bt26-04"}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "A vulnerability exists in the interaction between a Endpoint Privilege Management\u00a0(Windows\u00a0Deployment)\u00a0support\u00a0utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended.", "supportingMedia": [{"type": "text/html", "value": "A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended. ", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1220", "description": "CWE-1220 Insufficient granularity of access control"}]}], "providerMetadata": {"orgId": "13061848-ea10-403d-bd75-c83a022c2891", "shortName": "BT", "dateUpdated": "2026-08-17T16:29:12.385Z"}}}, "cveMetadata": {"cveId": "CVE-2026-40145", "state": "PUBLISHED", "dateUpdated": "2026-08-17T18:17:49.348Z", "dateReserved": "2026-04-09T18:39:27.757Z", "assignerOrgId": "13061848-ea10-403d-bd75-c83a022c2891", "datePublished": "2026-08-17T16:29:12.385Z", "assignerShortName": "BT"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "Endpoint Privilege Management (Windows deployment)", "vendor": "BeyondTrust", "versions": [{"lessThan": "26.1.2", "status": "affected", "version": "0", "versionType": "cpe"}]}], "source": "13061848-ea10-403d-bd75-c83a022c2891"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability exists in the interaction between a Endpoint Privilege Management\u00a0(Windows\u00a0Deployment)\u00a0support\u00a0utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended."}, {"lang": "es", "value": "Una vulnerabilidad existe en la interacci\u00f3n entre una utilidad de soporte de Endpoint Privilege Management (implementaci\u00f3n de Windows) y los controles de protecci\u00f3n contra manipulaciones del agente. Bajo ciertas condiciones, las protecciones aplicadas al proceso de la utilidad podr\u00edan no aplicarse seg\u00fan lo previsto."}], "id": "CVE-2026-40145", "lastModified": "2026-10-23T16:10:00.313", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "13061848-ea10-403d-bd75-c83a022c2891", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-40145", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-17T18:16:53.700643Z", "version": "2.0.3"}}]}, "published": "2026-08-17T17:16:39.787", "references": [{"source": "13061848-ea10-403d-bd75-c83a022c2891", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40145"}, {"source": "13061848-ea10-403d-bd75-c83a022c2891", "url": "https://www.beyondtrust.com/trust-center/security-advisories/bt26-04"}], "sourceIdentifier": "13061848-ea10-403d-bd75-c83a022c2891", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1220"}], "source": "13061848-ea10-403d-bd75-c83a022c2891", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,26.1.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Endpoint Privilege Management (Windows deployment)", "source": "cna", "vendor": "BeyondTrust"}, "product": "endpoint_privilege_management_(windows_deployment)", "vendor": "beyondtrust"}], "created": "2026-08-17T17:45:03.601279+00:00", "updated": "2026-08-21T12:40:03.904863+00:00", "vendors": ["beyondtrust", "beyondtrust$PRODUCT$endpoint_privilege_management_(windows_deployment)"]}