CVE-2026-20161

{
  "id": "CVE-2026-20161",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-15T17:17:03.120",
  "lastModified": "2026-10-25T23:10:00.167",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local system of an affected device.\r\n\r\nThis vulnerability is due to improper access controls on files that are on the local file system of an affected device. An attacker could exploit this vulnerability by placing a symbolic link in a specific location on the local file system. A successful exploit could allow the attacker to bypass file system permissions and overwrite arbitrary files on the affected device."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en la CLI de Cisco ThousandEyes Enterprise Agent podría permitir a un atacante local autenticado con privilegios bajos sobrescribir archivos arbitrarios en el sistema local de un dispositivo afectado.\n\nEsta vulnerabilidad se debe a controles de acceso inadecuados en archivos que se encuentran en el sistema de archivos local de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad al colocar un enlace simbólico en una ubicación específica en el sistema de archivos local. Un exploit exitoso podría permitir al atacante eludir los permisos del sistema de archivos y sobrescribir archivos arbitrarios en el dispositivo afectado."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Cisco ThousandEyes Enterprise Agent",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "Agent 5.0",
              "status": "affected"
            },
            {
              "version": "Agent 4.4.4",
              "status": "affected"
            },
            {
              "version": "Agent 4.4.3",
              "status": "affected"
            },
            {
              "version": "Agent 4.4.2",
              "status": "affected"
            },
            {
              "version": "Agent 4.2",
              "status": "affected"
            },
            {
              "version": "Agent 4.1",
              "status": "affected"
            },
            {
              "version": "Agent 4.0",
              "status": "affected"
            },
            {
              "version": "Agent 5.1",
              "status": "affected"
            },
            {
              "version": "Agent 5.1.2",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-15T16:54:35.119090Z",
          "id": "CVE-2026-20161",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-59"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-te-agentfilewrite-tqUw3SMU",
      "source": "[email protected]"
    }
  ]
}