CVE-2026-50602 Planet9 Incorrect Permission Assignment Vulnerability Information
Local attackers can modify a SYSTEM-privileged executable due to weak permissions, enabling arbitrary code execution with SYSTEM privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-50602?
CVE-2026-50602 is a high-severity vulnerability in Acer Planet9 background service, published on 17 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A security vulnerability has been identified in Planet9 due to incorrect file permissions assigned to an application executable used by the Planet9 background service. The service runs with SYSTEM privileges, while the affected executable grants excessive permissions to non-administrative users. As a result, an authenticated local user could potentially modify or replace the executable and execute arbitrary code with SYSTEM privileges when the service starts or the system is restarted.
Weakness: CWE-732
Which versions are affected by CVE-2026-50602?
How do I fix CVE-2026-50602?
No fix has been published for CVE-2026-50602 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-50602 being exploited?
There is no known exploitation of CVE-2026-50602 in the wild and no public exploit code.
Sources
Also known as GHSA-63xg-4wvg-w9xp.