CVE-2026-122164

FAQ

How could an attacker exploit this vulnerability?

An attacker who controls authentication in a trusted forest could send specially crafted authentication information to the target forest. Successful exploitation could raise the integrity level of the attacker's identity to System, allowing actions otherwise blocked by integrity-level restrictions where existing resource permissions already allow access. This does not grant SYSTEM-account privileges or target-forest administrator membership.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation requires an existing trust relationship between the attacker's forest and the target forest, together with resource permissions that already allow the attacker's identity access. The vulnerability bypasses integrity-level restrictions but does not grant otherwise absent resource access permissions.