CVE-2024-13861 — Sophos / Taegis Endpoint Agent (Linux)

CVE-2024-13861

Sophos / Taegis Endpoint Agent (Linux) PUBLISHED

Description (CNA)

A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux) versions older than 1.3.10 allows local users arbitrary code execution as root. Redhat-based systems using RPM packages are not affected.

Affected (CNA)

Vendor / product	Versions
Sophos / Taegis Endpoint Agent (Linux)	affected 0 before 1.3.10

CWE

CWE-732

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20250411-taegis-agent-lpe

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.