PT-2026-35275 · Unknown · Logontracer

Yuki Matsuhashi · Published 2026-04-27 · Updated 2026-05-23 · CVE-2026-33277

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LogonTracer versions prior to 2.0.0

Description An OS command injection flaw exists in LogonTracer, an open-source tool used for investigating malicious Windows logons. This issue allows an authenticated, logged-in user to execute arbitrary OS commands with full system privileges.

Recommendations Update to version 2.0.0 or later.

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-33277

Affected Products

Logontracer

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2026-33277 · Security Note
• https://twitter.com/lyrie_ai/status/2058103455894372439 · Twitter Post
• https://twitter.com/CVEarity/status/2048693769269326287 · Twitter Post
• https://twitter.com/lyrie_ai/status/2058103454615163138 · Twitter Post
• https://twitter.com/DFIR_Lab/status/2049644195627901238 · Twitter Post
• https://twitter.com/lyrie_ai/status/2058103457630900237 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2048584132343579102 · Twitter Post
• https://jpcert.or.jp/press/2026/PR20260423.html · Note
• https://twitter.com/lyrie_ai/status/2058103456901029897 · Twitter Post
• https://twitter.com/lyrie_ai/status/2058103456364122267 · Twitter Post
• https://twitter.com/lyrie_ai/status/2058103454950625536 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1sxjyzb/logontracer_os_command_injection_vulnerability · Reddit Post
• https://twitter.com/CVEnew/status/2048910118071476355 · Twitter Post
• https://twitter.com/lyrie_ai/status/2058103455382659125 · Twitter Post
• https://jvn.jp/en/jp/JVN57877356 · Note