CVE-2026-5054

CVE-2026-5054 is a local privilege escalation vulnerability affecting NoMachine that stems from improper validation of user-supplied file paths in command line parameter handling. This flaw allows authenticated local attackers with low-privilege code execution capabilities to escalate their privileges to root and execute arbitrary code on the affected system. The vulnerability presents a HIGH severity risk with a CVSS score of 7.8, requiring only local access and low privileges to exploit, with no user interaction necessary. The attack has high impact across confidentiality, integrity, and availability, though it requires prior code execution on the target system as a prerequisite. There is currently no evidence of active exploitation in the wild, as this vulnerability is not listed on the CISA Known Exploited Vulnerabilities catalog and remains inactive on threat tracking lists. The EPSS score of 0.000160000 indicates minimal real-world exploitation probability relative to other disclosed vulnerabilities, suggesting limited immediate threat despite the moderate FAUCET Risk Score of 49.0.