What’s Vulnerable › Vulnerabilities

CVE-2026-40145: Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility

• Severity: high (CVSS 7.1 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-17 · updated 2026-10-23
• Weakness: CWE-1220

Description

A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended.

Affected products

• BeyondTrust Endpoint Privilege Management (Windows deployment): before 26.1.2 — fixed in 26.1.2

How to fix

Upgrade to a fixed version: BeyondTrust Endpoint Privilege Management (Windows deployment) 26.1.2. Check the vendor advisory for mitigations.

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-40145
• https://www.beyondtrust.com/trust-center/security-advisories/bt26-04

Get alerted when CVE-2026-40145 or the next vulnerability affects your stack