Loading vulnerability…
Local Privilege Escalation in Citrix Secure Access Client for Windows
CVE-2026-118268 is an improper privilege management vulnerability in Citrix Secure Access Client for Windows versions before 26.11.1.6. A low-privileged local user can exploit the vulnerability to obtain SYSTEM privileges without user interaction. The vulnerability has a CVSS v4.0 base score of 8.5.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation elevates a standard local user to SYSTEM, resulting in high impacts to the affected Windows system's confidentiality, integrity, and availability.
If you can’t patch tonight, do this now.
No interim workaround is specified by Citrix.
Patch, then assume compromise.
Upgrade Citrix Secure Access Client for Windows to version 26.11.1.6 or later as soon as possible.
No public exploits tracked yet. Mallory keeps watching.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.