CVE-2026-59567 PUBLISHED

Local privilege escalation

Assigner: Zscaler
Reserved: 06.07.2026 Published: 24.08.2026 Updated: 24.08.2026

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 8.8

Product Status

Vendor Zscaler
Product Client Connector
Versions Default: affected
  • affected from 0 to Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0372 (excl.)
  • affected from 0 to MacOS: 4.5.2.312, 4.7.0.292, 4.8.0.191 (excl.)
  • affected from 0 to Linux: 3.7.2.64, 4.2.1.64 (excl.)

References

Problem Types

  • CWE-280 Improper handling of insufficient permissions or privileges CWE

Impacts

  • CAPEC-233 Privilege Escalation