{"id":"CVE-2026-105669","kind":"vulnerability","aliases":["CVE-2026-105669"],"related":[],"title":"Ivanti Sentry: admin argument injection runs arbitrary on-disk binaries remotely","description":"Argument injection in Ivanti Sentry before version 10.8.3 and 10.7.4 allows a remote authenticated attacker with admin privileges to execute arbitrary on-disk binaries.","summary":"Ivanti Sentry, a gateway that sits between users and internal resources, fails to sanitize arguments, so an attacker with admin rights can run arbitrary binaries already on the disk. The attacker needs admin access first, so the flaw mainly matters for insider or stolen-admin scenarios.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Ivanti Sentry","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["ivanti-sentry","on-prem","self-hosted","vendor"],"not_affected_if":["already-on-fixed-version","no-admin-exposure"],"how_to_check":"- Check the installed Ivanti Sentry version in the admin console; the sources say versions before `10.8.3` and `10.7.4` are affected.\n- Confirm whether admin accounts are restricted and whether admin access is reachable from the internet.","fix":"- Move to `10.8.3` or `10.7.4` (the fixed versions named in the description).","status":"open","published_at":"2026-11-10T16:17:13+00:00","first_seen_at":"2026-11-10T16:22:32+00:00","triaged_at":"2026-11-10T16:23:33+00:00","updated_at":"2026-11-10T16:23:33+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T16:23:33Z","model":"claude-haiku-5-5","output":{"fix":"- Move to `10.8.3` or `10.7.4` (the fixed versions named in the description).","reach":"network","title":"Ivanti Sentry: admin argument injection runs arbitrary on-disk binaries remotely","impact":"high","summary":"Ivanti Sentry, a gateway that sits between users and internal resources, fails to sanitize arguments, so an attacker with admin rights can run arbitrary binaries already on the disk. The attacker needs admin access first, so the flaw mainly matters for insider or stolen-admin scenarios.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ivanti-sentry","self-hosted","on-prem"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"admin attacker runs arbitrary binaries already on disk","analyst_note":"Confirm the affected version ranges and whether a remote unauthenticated path exists at https://nvd.nist.gov/vuln/detail/CVE-2026-105669 or the Ivanti advisory.","how_to_check":"- Check the installed Ivanti Sentry version in the admin console; the sources say versions before `10.8.3` and `10.7.4` are affected.\n- Confirm whether admin accounts are restricted and whether admin access is reachable from the internet.","plain_action":"","product_name":"Ivanti Sentry","needs_analyst":true,"not_affected_if":["already-on-fixed-version","no-admin-exposure"],"who_is_affected":"Organisations running Ivanti Sentry before `10.8.3` (or `10.7.x` before `10.7.4`). Exploitation needs an admin account on the Sentry instance, so the risk is highest where admin access is broadly granted or exposed. unknown whether the sources name default configurations that change exposure.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000792,"input_tokens":4528,"output_tokens":679,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-105669':15A,18A '-2026':14A,17A '10.7.4':87C '10.8.3':85C 'access':64B 'admin':3A,50B,63B,76B,94C 'allow':88C 'alreadi':56B 'arbitrari':7A,54B,98C 'argument':4A,45B,78C 'attack':48B,61B,92C 'authent':91C 'binari':11A,55B,102C 'cve':13A,16A 'disk':10A,59B,101C 'execut':97C 'fail':42B 'first':65B 'flaw':68B 'gateway':34B 'host':29B 'inject':5A,79C 'insid':72B 'intern':40B 'ivanti':1A,19A,22B,31B,81C 'ivanti-sentri':21B 'main':69B 'matter':70B 'need':62B 'on-disk':8A,99C 'on-prem':24B 'prem':26B 'privileg':95C 'remot':12A,90C 'resourc':41B 'right':51B 'run':6A,53B 'sanit':44B 'scenario':77B 'self':28B 'self-host':27B 'sentri':2A,23B,32B,82C 'sentry':20A 'sit':36B 'stolen':75B 'stolen-admin':74B 'user':38B 'vendor':30B 'version':84C","nicknames":[],"mitigations":[],"who_affected":"Organisations running Ivanti Sentry before `10.8.3` (or `10.7.x` before `10.7.4`). Exploitation needs an admin account on the Sentry instance, so the risk is highest where admin access is broadly granted or exposed. unknown whether the sources name default configurations that change exposure.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["ivantisentry","sentry"],"ptokens":["ivanti","sentry"],"labels":["ivantisentry","medium","onprem","selfhosted","vendor"],"campaign_type":null,"search_a":"'-105669':15A,18A '-2026':14A,17A 'admin':3A 'arbitrari':7A 'argument':4A 'binari':11A 'cve':13A,16A 'disk':10A 'inject':5A 'ivanti':1A,19A 'on-disk':8A 'remot':12A 'run':6A 'sentri':2A 'sentry':20A","search_b":"'access':64B 'admin':50B,63B,76B 'alreadi':56B 'arbitrari':54B 'argument':45B 'attack':48B,61B 'binari':55B 'disk':59B 'fail':42B 'first':65B 'flaw':68B 'gateway':34B 'host':29B 'insid':72B 'intern':40B 'ivanti':22B,31B 'ivanti-sentri':21B 'main':69B 'matter':70B 'need':62B 'on-prem':24B 'prem':26B 'resourc':41B 'right':51B 'run':53B 'sanit':44B 'scenario':77B 'self':28B 'self-host':27B 'sentri':23B,32B 'sit':36B 'stolen':75B 'stolen-admin':74B 'user':38B 'vendor':30B","search_c":"'10.7.4':87C '10.8.3':85C 'admin':94C 'allow':88C 'arbitrari':98C 'argument':78C 'attack':92C 'authent':91C 'binari':102C 'disk':101C 'execut':97C 'inject':79C 'ivanti':81C 'on-disk':99C 'privileg':95C 'remot':90C 'sentri':82C 'version':84C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T16:17:13+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","cvss_by":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105669","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105669","severity":null,"published_at":"2026-11-10T16:17:13+00:00","modified_at":"2026-11-10T16:17:13+00:00","first_seen_at":"2026-11-10T16:22:32+00:00","fetched_at":"2026-11-10T16:22:32+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}