CVE-2026-122169

FAQ

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation requires connection-security policies that apply to the target service and an existing authenticated connection established by a desktop application for the same user. The attacker cannot establish that authenticated desktop connection solely by exploiting this vulnerability.

According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?

Successful exploitation could allow an application running in an AppContainer to use the desktop user's authenticated network identity outside that sandbox. This does not by itself grant code execution or bypass additional authorization required by the target service.