A local privilege escalation vulnerability in the Apex One/SEP agent allows authenticated local users to bypass security controls and gain elevated privileges.

This is an origin validation flaw within the Apex One/SEP agent. Similar to CVE-2026-34930, this vulnerability allows an authenticated local attacker to perform unauthorized actions with elevated privileges, effectively bypassing local security enforcement.

The CVSS score of 7.8 indicates a High severity risk. A successful exploit allows a local attacker to elevate their privileges to a higher level, potentially resulting in full system compromise, data theft, or the disabling of endpoint protection mechanisms, which significantly increases the risk of further compromise.

Immediate Action: Check the vendor portal for the latest security updates and apply the necessary patches to all affected Apex One/SEP agents.

Proactive Monitoring: Review endpoint security event logs for unauthorized configuration changes or privilege escalation attempts originating from local user accounts.

Compensating Controls: Use Endpoint Detection and Response (EDR) tools to alert on suspicious process parent-child relationships that suggest privilege escalation attempts.

Public Exploit Available: false

Given the potential for complete host takeover, this vulnerability should be treated with high priority. Organizations should coordinate with their IT and security teams to ensure that all endpoints running the Apex One/SEP agent are patched immediately to mitigate the risk of local privilege escalation.