CVE-2026-8370

Automic Automation Agent Unix privilege escalation

State: Published
Severity: 8.5 High
Published: May 19, 2026
Updated: May 19, 2026
Reserved: May 11, 2026

Description

Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX, Solaris x64, Solaris Sparc 64 allows Privilege Escalation, Target Programs with Elevated Privileges.

This issue affects Automic Automation: < 24.4.4 HF1.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L	ca

Weaknesses

CWE-250 Execution with unnecessary privileges

Affected Products

Product	Versions
Automic AutomationBroadcom	< 24.4.4 HF1Affected 24.4.4 HF1 or laterNot affected 26.0.0Not affected

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37512vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.