Executive brief
HPE ClearPass OnGuard is a network access control and device management platform used to enforce security policies across enterprise networks. A vulnerability in the OnGuard agent allows an authenticated attacker to escalate their privileges to root level, potentially gaining complete control over affected systems and enabling unauthorized access to sensitive network infrastructure.
Technical details
The vulnerability is a privilege escalation flaw in the ClearPass OnGuard agent that allows an authenticated remote attacker to elevate privileges to root. The attack requires prior authentication to the agent. Successful exploitation grants root-level access to the vulnerable system, enabling full compromise of the OnGuard deployment and potential lateral movement within the network. Patch availability should be confirmed with HPE support.
Affected products
- HPE ClearPass OnGuard <UNKNOWN>
Timeline
- 2026-09-09: disclosed