CVE-2026-110359 — Hyland / Desktop Host

CVE-2026-110359

Hyland / Desktop Host PUBLISHED

Description (CNA)

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges.

Affected (CNA)

Vendor / product	Versions
Hyland / Desktop Host	affected 0 before 25.1.1

CWE

CWE-276

References

https://github.com/JNDataRT/Vulns/blob/main/Advisories/2026/1.md

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.