CVE-2026-15265 — Tenable Agent Path Traversal Leading to Remote Code Execution

CVE-2026-15265

Tenable Agent Path Traversal Leading to Remote Code Execution PUBLISHED

Description (CNA)

A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.

Affected (CNA)

Vendor / product	Versions
tenable / tenable_agent	affected 11.2.0; affected 0 through 11.1.3

CWE

CWE-22, CWE-347

References

https://www.tenable.com/security/tns-2026-18

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.