{"id":"CVE-2026-92817","published":"2026-10-14T00:17:13.290","lastModified":"2026-10-14T18:19:35.657","description":"The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker could exploit these elevated privileges to execute arbitrary code in the context of the Ignition Gateway process.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-286-01.json","tags":[]},{"url":"https://security.inductiveautomation.com/?tcuUid=34477620-731d-4b70-b22b-9450f9a659a3","tags":[]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-286-01","tags":[]}],"exploitRefs":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-286-01.json","tags":[]}],"hasPoc":true,"ai":{"summary":"The Ignition Perspective module fails to properly validate session privileges when determining Designer-level access, allowing authenticated users with Vision project access to escalate their privileges and gain Designer-level capabilities. This flaw enables attackers to execute arbitrary code in the context of the Ignition Gateway process.","exploitability":"Exploitation is relatively straightforward for authenticated users who have access to a Vision project, requiring only a valid Vision session identifier to gain elevated Designer privileges and execute arbitrary code.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on the Ignition Gateway system with high privileges, potentially leading to full system compromise and unauthorized access to connected industrial control systems.","remediation":"Upgrade to Ignition 8.1.20 or later, which includes a fix for this privilege escalation vulnerability in the Perspective module.","detection":"Monitor for unusual Designer-level access patterns in the Ignition Gateway logs, particularly when Vision session identifiers are used to access Designer features without proper privilege validation.","tags":["privilege-escalation","ics","session-management"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:25:58.945Z"}}