Home

Description

Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local privilege escalation to SYSTEM. The fixed versions are 11.2.1.28, 11.3.0.38, 11.4.0.24, and 11.5.0.15.

PUBLISHED Reserved 2026-04-01 | Published 2026-04-01 | Updated 2026-04-01 | Assigner mitre




HIGH: 7.4CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Product status

Default status
unaffected

11 (custom) before 11.2.1.28
affected

11.3 (custom) before 11.3.0.38
affected

11.4 (custom) before 11.4.0.24
affected

11.5 (custom) before 11.5.0.15
affected

References

documentation.lakesidesoftware.com/...Notes%7CAgent%7C_____8

documentation.lakesidesoftware.com/...Notes%7CAgent%7C_____6

documentation.lakesidesoftware.com/...Notes%7CAgent%7C_____4

documentation.lakesidesoftware.com/...Notes%7CAgent%7C_____2

cve.org (CVE-2026-35099)

nvd.nist.gov (CVE-2026-35099)

Download JSON