CVE-2026-4482

CVE-2026-4482 is a privilege escalation vulnerability affecting Windows systems where installer certificate files in the bootstrap/common/ssl folder lack proper access restrictions, allowing standard local users to read sensitive agent identity material stored in the client.key file. The vulnerability stems from overly permissive file permissions that grant read and execute access to unauthorized users on the affected system. The attack vector is local, requiring an attacker to have authenticated access to the Windows system as a standard user. The attack complexity is low given the straightforward nature of file system exploitation. The primary impact is the exposure of cryptographic credentials that could enable an attacker to impersonate the affected agent or gain unauthorized access to related infrastructure. There is currently no evidence of active exploitation in the wild, as the vulnerability does not appear on the Known Exploited Vulnerabilities catalog. The EPSS score of 0.00008 indicates minimal real-world exploitation activity, and community attention remains low. No public exploit code has been identified, suggesting this remains a lower-priority threat despite the moderate FAUCET Risk Score of 45.0/100.