Privilege Escalation Due to Outdated Component

This document addresses the specific challenges associated with the privilege escalation that is encountered due to outdated component.

Severity: Medium
Attack Vector: Local
Fixed build: For versions 11.4.2528.34 or below, upgrade to version 11.4.2528.35.
For versions 11.5.2604.14 or below, upgrade to version 11.5.2600.15
Fix release date: 2026-02-17
Reported by: Sandro Poppi via ZohoCorp Bug Bounty Program

What was the problem?

The upload logs feature in the agent tray could be exploited to inadvertently delete files from directories to which the user did not have proper access due to the usage of a outdated component, which leads to privilege escalation. We have addressed the issue, preventing both arbitrary file deletion and privilege escalation.

How to fix it?

Upgrading to the latest version is strongly advised to remediate the issue. To upgrade, follow the below steps:

1. Login to the Endpoint Central console, and on the top right corner, you can see your current build version.
2. Using the above-mentioned Fixed build details, kindly upgrade your build to the appropriate version.
3. Download the PPM to upgrade.

For any further questions or concerns on this, please write to our support team.