CVE-2026-90999 — Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment

CVE-2026-90999

Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment PUBLISHED

Description (CNA)

Sentry Seer is vulnerable to a multi-stage trust-boundary violation that allows unauthenticated attacker-controlled telemetry to become code that is executed by an agent in a privileged automation environment. An external attacker can submit fabricated Sentry events without having access to the victim’s Sentry account, source repository, or infrastructure.

Affected (CNA)

Vendor / product	Versions
Functional Software, Inc. / Sentry Seer	affected Web site

CWE

No CWE identifiers supplied.

References

https://kb.cert.org/vuls/id/212479

ADP enrichment

CVE

No English description supplied.

https://www.kb.cert.org/vuls/id/212479

CISA-ADP

No English description supplied.

No references supplied.