What’s Vulnerable › Vulnerabilities

CVE-2024-6689: Local privilege escalation vulnerability in baramundi Management Agent via MSI Installer

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-15 · updated 2026-06-17
• Weakness: CWE-749

Description

Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYSTEM.

Affected products

• baramundi Management Agent: through 23.1.172.0

References

• https://www.baramundi.com/en-us/security-info/s-2024-01/
• https://www.baramundi.com/en-us/security-info/s-2024-01/

Get alerted when CVE-2024-6689 or the next vulnerability affects your stack