{"id":"CVE-2026-79806","published":"2026-10-06T20:17:32.133","lastModified":"2026-10-08T04:17:50.280","description":"A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit allows a malicious user to escalate to root privileges on the affected Linux client.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-269"],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A privilege escalation vulnerability in ClearPass Policy Manager's OnGuard Linux agent allows local users to escalate their privileges to root, potentially enabling full system compromise. This flaw affects Linux clients running the agent and could be exploited by attackers who already have user-level access.","exploitability":"Exploitation requires local access to a Linux client running the ClearPass OnGuard agent with existing user credentials, making it moderately difficult to achieve but not highly complex.","blast_radius":"If exploited, this vulnerability could lead to complete system compromise across all affected Linux clients, potentially allowing attackers to access sensitive data, modify system configurations, or establish persistent backdoors.","remediation":"Upgrade to ClearPass Policy Manager version 2.590 or later to address this privilege escalation vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["priv-esc","linux","clearpass"],"model":"garnet-coder","analyzedAt":"2026-10-14T09:00:59.846Z"}}