← All Advisories

CyberArk Privileged Session Manager for SSH Incomplete Input Validation Allows an Authenticated Low-Privilege User to Execute Arbitrary Commands on the PSMP Host

Last refreshed2026-09-30

Status: UPDATED  |  Advisory ID: CVE-2026-45172

Key Details

CVECVE-2026-45172
CVSS Score / Version8.8 (High) / CVSS v3.1
Updated2026-06-23
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Proseattack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected productsPalo Alto Networks idira_privileged_session_manager_for_ssh
Classified asCWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Palo Alto Networksidira_privileged_session_manager_for_ssh
SubsystemsGeneral OT
SectorsMultiple

What to Know

Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions prior to 15.0.2, 14.6.3, 14.2.5, and 14.0.6, an authenticated, low-privileged user could potentially execute arbitrary commands on the PSMP host. CyberArk Security Bulletins: CA26-17 and CA26-18

What to Do

Monitor Palo Alto Networks's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-45172
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-45172