CVE-2026-4482
CWE-732Published: April 10, 2026· Updated: Apr 13, 2026
Official Description
The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems (users have read and execute access). For the client.key file in particular, this could potentially lead to exploits, as this exposes agent identity material to any locally authenticated standard user.
Technical Analysis
CVE-2026-4482 requires local access, meaning attackers must already have a foothold on the target system.
Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.
A proof-of-concept (PoC) exploit exists for CVE-2026-4482. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.
CVSS v3.1 Vector Breakdown
Exploit & PoC Resources
All References (1)
Quick Facts
Related CVEs (CWE-732)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2026-4482 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts