CVE-2026-1232 MEDIUM

CVE-2026-1232: Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows

Vendor Beyondtrust
Product Privilege management for Windows
Weakness CWE-693
Published February 2, 2026
Last update February 2, 2026

CVSS base score

6.8/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7. Under certain conditions, a local authenticated user with elevated privileges may be able to bypass the product’s anti-tamper protections, which could allow access to protected application components and the ability to modify product configuration.

Key dates

02Disclosure timeline

February 2, 2026 CVE published
February 2, 2026 Record updated