A vulnerability in Ivanti Desktop and Server Management (DSM) allows a local authenticated attacker to achieve privilege escalation, posing a significant risk to system integrity.

The flaw is categorized as an exposed dangerous method (CWE-749), which allows an attacker who already possesses local authenticated access to execute unauthorized actions and escalate privileges on the host system.

Successful exploitation of this vulnerability grants an attacker elevated permissions, which could lead to a full system compromise, unauthorized data access, and the potential for lateral movement within the network. With a CVSS score of 7.8, this vulnerability is classified as High severity, indicating that the impact on confidentiality, integrity, and availability is substantial.

Immediate Action: Update all instances of Ivanti Desktop and Server Management to version 2026.1.1 or later to resolve the underlying method exposure.

Proactive Monitoring: Audit local system logs for unusual account activity or unexpected privilege changes that may indicate an attempt to leverage this local escalation vector.

Compensating Controls: Restrict local access to the server to only authorized personnel and implement the principle of least privilege to minimize the potential impact should an account be compromised.

Public Exploit Available: No (exploit_available: false).

Given the High severity of this privilege escalation flaw, administrators should prioritize patching their Ivanti DSM environments. Ensuring that software is updated to version 2026.1.1 is the only definitive way to eliminate the risk posed by this exposed dangerous method.