---
id: CVE-2026-92744
title: >-
  Delinea Privilege Manager agent unauthenticated remote code execution
  vulnerability
summary: >-
  Under certain conditions, privilege manager agent allows a remote
  unauthenticated attacker to execute

  arbitrary code as LocalSystem.
severity: high
cvss: 8.7
cvssVector: 'CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'
cvssSource: cna
cwe:
  - CWE-306
  - CWE-295
vendor: Delinea
product: Privilege Manager
affected:
  - privilege_manager >= 10.1.0 <= 12.0.5796
  - privilege_manager >= 13.0.0 <= 13.0.1058
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-30T17:00:47.417177Z'
exploitAvailable: true
published: '2026-10-29'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T18:31:46.118Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-92744'
references:
  - url: 'https://delinea.com/security-advisories'
tags:
  - cve.org
  - exploit-available
epss: 0.00257
epssPercentile: 0.1749
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/isukasanuj/CVE-2026-92744'
  checkedAt: '2026-11-05T16:25:07.460Z'
ingestedAt: '2026-11-05T16:24:31.326Z'
---

## Overview

Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute
arbitrary code as LocalSystem.

## Affected

- `privilege_manager >= 10.1.0 <= 12.0.5796`
- `privilege_manager >= 13.0.0 <= 13.0.1058`

## Remediation

Upgrade to privilege manager version 13.0.2064 if you're using windows agent above 12.0.5796




Upgrade to privilege manager version 12.0.5804 if you're using windows agent 12.0.5796 or less




For cloud customers and on-prem customers that are unable to upgrade, please see release notes for the steps you can take to mitigate the issue.