CVE-2026-12518 — Local privilege escalation in the Logi Options+ updater service on Windows

CVE-2026-12518

Local privilege escalation in the Logi Options+ updater service on Windows PUBLISHED

Description (CNA)

A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM.

Affected (CNA)

Vendor / product	Versions
Logitech / Logi Options+	affected 1.88.0 before 2.7.0

CWE

CWE-269

References

https://blog.amberwolf.com/blog/2026/september/a-peripheral-path-to-system---exploiting-logi-options+-for-system-shells/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.