Is CVE-2026-45172 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-45172 being exploited in the wild.

How severe is CVE-2026-45172?

Informational severity, with a CVSS score of 8.7, published 11 June 2026.

Which products and versions are affected?

CyberArk Privileged Session Manager for SSH Prior to 15.0.2, 14.6.3, 14.2.5, and 14.0.6.

Is there a fix for CVE-2026-45172?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-45172 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-45172?

Check whether you run CyberArk Privileged Session Manager for SSH at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-45172: Idira Privileged Session Manager for SSH command injection

CVE-2026-45172 · Severity: info · CVSS 8.7 · Published 2026-06-11

A vulnerability in the Idira Privileged Session Manager for SSH (PSMP) allows a user with low-level access to take control of the underlying server. This component is typically used to secure and monitor administrative access to sensitive systems; an exploit could allow an attacker to bypass security controls and execute unauthorized commands. Organizations should update to the latest patched versions to prevent potential system compromise.

Vendors: CyberArk.

Quick answers

Is CVE-2026-45172 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-45172 being exploited in the wild.
How severe is CVE-2026-45172?: Informational severity, with a CVSS score of 8.7, published 11 June 2026.
Which products and versions are affected?: CyberArk Privileged Session Manager for SSH Prior to 15.0.2, 14.6.3, 14.2.5, and 14.0.6.
Is there a fix for CVE-2026-45172?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-45172 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-45172?: Check whether you run CyberArk Privileged Session Manager for SSH at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An OS command injection vulnerability (CWE-78) exists in Idira Privileged Session Manager for SSH (PSMP) due to incomplete input validation. An authenticated attacker with low privileges can exploit this flaw via the network to execute arbitrary commands on the PSMP host. The vulnerability affects versions prior to 15.0.2, 14.6.3, 14.2.5, and 14.0.6. Patches have been released by the vendor to address this issue by improving input sanitization.

Affected products

Idira Privileged Session Manager for SSH (PSMP) Prior to 15.0.2, 14.6.3, 14.2.5, and 14.0.6

Timeline

2026-06-11: disclosed: CVE published to NVD dataset

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.