CVE-2025-66374

High · 7.8

CVSS

7.8

EPSS

0.3%

Published

Feb 3, 2026

CISA due date

—

The record

CyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve privilege escalation through policy elevation of an Administration task.

Affected packages

Ecosystem	Package	Introduced	Fixed