Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-1680

Local Privilege Escalation in Local Admin Service

Description

Improper access control in the WCF endpoint in Edgemo (now owned by Danoffice IT) Local Admin Service 1.2.7.23180 on Windows allows a local user to escalate their privileges to local administrator via direct communication with the LocalAdminService.exe named pipe, bypassing client-side group membership restrictions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Edgemo (Danoffice IT) Local Admin Service

Default version status: unknown

  • 1.2.7.23180affected

References