An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing executable content in a directory owned by a privileged service.
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://psirt.watchguard.com/CVE-2026-115253 |
|
History
Thu, 22 Oct 2026 09:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing executable content in a directory owned by a privileged service. | |
| Title | WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering | |
| First Time appeared |
Watchguard
Watchguard watchguard Agent |
|
| Weaknesses | CWE-276 CWE-732 |
|
| CPEs | cpe:2.3:a:watchguard:watchguard_agent:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Watchguard
Watchguard watchguard Agent |
|
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: WatchGuard
Published:
Updated: 2026-10-22T08:39:45.537Z
Reserved: 2026-10-22T08:38:59.454Z
Link: CVE-2026-115253
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-22T09:17:16.137
Modified: 2026-10-22T09:17:16.137
Link: CVE-2026-115253
Redhat
No data.
OpenCVE Enrichment
No data.