PT-2026-42000 · Broadcom · Automic Automation Agent

Published 2026-05-19 · Updated 2026-05-19 · CVE-2026-8370

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions Broadcom Automic Automation Agent Unix versions prior to 24.4.4 HF1

Description An issue involving execution with unnecessary privileges exists in Broadcom Automic Automation Agent Unix across multiple platforms, including Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX, Solaris x64, and Solaris Sparc 64. This flaw allows for privilege escalation and the ability to target programs with elevated privileges.

Recommendations Update to version 24.4.4 HF1 or later.

Fix

LPE

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2026-8370

Affected Products

Automic Automation Agent

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-8370 · Security Note
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37512 · Vendor Advisory
• https://twitter.com/CVEnew/status/2056870193477947905 · Twitter Post
• https://t.me/CVEtracker/54281 · Telegram Post