CVE-2026-40145Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility

Description

A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://nvd.nist.gov/vuln/detail/CVE-2026-40145
• https://www.beyondtrust.com/trust-center/security-advisories/bt26-04