CVE-2026-45208: Apex One/SEP Agent Vulnerability Allows Local Privilege Escalation

The National Vulnerability Database has disclosed CVE-2026-45208, a high-severity time-of-check time-of-use (TOCTOU) vulnerability impacting Apex One and SEP agents. This flaw, rated with a CVSS score of 7.8 (HIGH), could enable a local attacker to escalate privileges on affected installations.

Exploitation requires an attacker to first achieve low-privileged code execution on the target system. Once this prerequisite is met, the TOCTOU race condition can be leveraged to gain higher privileges, posing a significant risk to the integrity and confidentiality of systems where these agents are deployed. The National Vulnerability Database attributes this to CWE-367.

While specific affected product versions were not detailed by the National Vulnerability Database, organizations utilizing Apex One or SEP agents should assume exposure and prioritize mitigation. This vulnerability underscores the critical importance of defense-in-depth, where even robust endpoint security solutions can harbor flaws exploitable by determined attackers who have already gained a foothold.