PT-2026-51605 · Fortra · File Integrity Monitoring

Published 2026-06-23 · Updated 2026-06-23 · CVE-2026-12164

NVD

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-12164

Affected Products

File Integrity Monitoring

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-12164 · Security Note
• https://fortra.com/security/advisories/product-security/fi-2026-010 · Note