Executive brief
PTC Windchill Risk and Reliability (WRR) is an enterprise risk management and asset lifecycle application used by organizations to assess and manage operational risks. A critical access control bypass vulnerability allows attackers to circumvent authorization controls, potentially enabling unauthorized access to sensitive risk data, system functions, or configuration settings without proper authentication or permissions.
Technical details
This vulnerability is classified as an access control bypass in PTC Windchill Risk and Reliability Enterprise Edition. The vulnerability allows attackers to circumvent authentication or authorization controls, gaining unauthorized access to protected resources or functionality. Without additional detail from the advisory sources, the specific attack vector and preconditions remain unclear, though the critical severity rating suggests the bypass is exploitable with minimal user interaction or special privileges. Patch availability and specific technical vectors should be confirmed through PTC's security advisory (CS474818), which was inaccessible at the time of analysis.
Affected products
- PTC Windchill Risk and Reliability Enterprise Edition
Timeline
- 2026-08-20: disclosed