Matrix42 Empirum Privilege Escalation via Insecure Named Pipe Permissions and Untrusted Search Path (CVE-2026-57919)

Vulnerability Overview CVE ID: CVE-2026-57919 Vulnerability Name: Privilege Escalation in Matrix42 Empirum Personal Backup via Insecure Named Pipe Permissions and Untrusted Search Path Description: creates a named pipe in Matrix42 Empirum and grants permissions to all authenticated users. A low-privileged local attacker can trigger arbitrary command execution by sending IPC messages, leveraging SYSTEM privileges to perform unauthorized privilege escalation by placing a malicious in a controlled working directory. Affected Products Affected Products: - Empirum Personal Backup version 25.4 - Empirum Personal Backup version 26.1 Remediation Mitigation Measures: - Apply hotfix addressing PRB39539 - Upgrade to Empirum 25.5 or later - Upgrade to Empirum 26.2 or later CVSS Score CVSS Version: 3.1 CVSS Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score: 7.8 (HIGH) Technical Details Root Cause: Insecure access control on named pipes Specific Details: - Overly permissive DACL - Read/write access available to authenticated users (CVE-270) - Exploitation via crafted IPC messages - Privilege escalation via untrusted search path (CVE-426) Impact Privilege escalation to SYSTEM Arbitrary code execution Complete system control Support For further assistance, please contact Matrix42 Support. Related Vulnerabilities CVE-2021-44228: Apache Log4j Remote Code Execution Vulnerability - Log4Shell CVE-2022-3602: OpenSSL X.509 Email Address 4-byte Buffer Overflow CVE-2022-2289: Apache Commons Text RCE when applied to untrusted input - Text4Shell CVE-2022-22965: Spring Framework RCE via Data Binding on JDK 9 - SpringShell CVE-2022-3786: OpenSSL X.509 Email Address Variable Length Buffer Overflow Summary This vulnerability involves privilege escalation in Matrix42 Empirum Personal Backup, facilitated by insecure named pipe permissions and an untrusted search path. The affected product versions are 25.4 and 26.1; it is recommended to remediate this issue by applying the hotfix or upgrading to a later version.

Goal Reached Thanks to every supporter — we hit 100%!

Matrix42 Empirum Privilege Escalation via Insecure Named Pipe Permissions and Untrusted Search Path (CVE-2026-57919)