CVE-2026-12164 — Privilege Escalation in Fortra File Integrity Monitoring (FIM)

CVE-2026-12164

Privilege Escalation in Fortra File Integrity Monitoring (FIM) PUBLISHED

Description (CNA)

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.

Affected (CNA)

Vendor / product	Versions
Fortra / File Integrity Monitoring (FIM)	affected 0 before 9.4.0

CWE

CWE-266

References

https://www.fortra.com/security/advisories/product-security/fi-2026-010

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.