CVE-2026-40145 — Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility

CVE-2026-40145

Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility PUBLISHED

Description (CNA)

A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended.

Affected (CNA)

Vendor / product	Versions
BeyondTrust / Endpoint Privilege Management (Windows deployment)	affected 0 before 26.1.2

CWE

CWE-1220

References

https://nvd.nist.gov/vuln/detail/CVE-2026-40145
https://www.beyondtrust.com/trust-center/security-advisories/bt26-04

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.