Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-15265

Tenable Agent Path Traversal Leading to Remote Code Execution

Description

A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tenable tenable_agent

  • 11.2.0affected
  • 0 to ≤ 11.1.3affected

References