High · published April 23, 2026
This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.
| Product | Versions | Fixed in |
|---|---|---|
| tenable/nessus | ≤ 10.11.3 | — |
| tenable/nessus_agent | ≤ 11.1.2 | — |