CVE-2026-6788 HIGH

CVE-2026-6788: Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent

Vendor Watchguard

Product WatchGuard Agent

Weakness CWE-427

Published May 6, 2026

Last update May 6, 2026

View on NVD All CVEs

CVSS base score

8.5/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.This issue affects WatchGuard Agent before 1.25.03.0000.

Key dates

02Disclosure timeline

May 6, 2026 CVE published

May 6, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-6788 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/427.html

Related vulnerabilities

CVE-2026-6788: Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent

01Description

02Disclosure timeline

03References

04Related CVE