CISA Flags High-Severity Privilege Escalation Flaw in Inductive Automation Ignition
CISA has disclosed a high-severity authentication vulnerability in Inductive Automation's Ignition software, tracked as CVE-2026-92817 with a CVSS score of 8.8. The flaw lets authenticated low-level users with Vision project access use a valid session identifier to gain Designer-level privileges and potentially run arbitrary code in the Ignition Gateway process. Affected versions include 8.1.0 through 8.1.54 and 8.3.0 through 8.3.8, with patches available in versions 8.1.55 and 8.3.9.
CVE-2026-92817 carries a CVSS v3 base score of 8.8. The weakness is an authorization logic error, CWE-863, tied to the Perspective module’s session privilege checks. An authenticated user who can reach a Vision project may present a valid Vision session identifier and obtain Designer rights, then potentially execute code as the Ignition Gateway process.
Inductive Automation’s Ignition is used worldwide for SCADA, MES, and IIoT. The affected ranges are 8.1.0–8.1.54 and 8.3.0–8.3.8. Fixes arrived in 8.3.9 (August 2025) and 8.1.55 (September 2026). CISA has not reported public exploitation of this specific flaw.
Operators of industrial control systems in manufacturing, energy, and IT may face heightened risk if vulnerable Ignition builds remain exposed or unpatched. A low-level user with Vision access could potentially reach Designer privileges, which may enable gateway code execution and disrupt SCADA/MES/IIoT operations. Because these systems can support critical infrastructure, successful exploitation could affect service continuity, safety, and data integrity. Patching, segmentation, and restricted remote access may reduce exposure. No public exploitation reported, so immediate broad compromise is not established.