---
id: "CVE-2026-105669"
page: "https://infrastack.ai/live/CVE-2026-105669"
kind: "vulnerability"
aliases: ["CVE-2026-105669"]
title: "Ivanti Sentry: admin argument injection runs arbitrary on-disk binaries remotely"
severity: "medium"
cvss: 6.7
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "Ivanti Sentry", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["ivanti-sentry", "on-prem", "self-hosted", "vendor"]
not_affected_if: ["already-on-fixed-version", "no-admin-exposure"]
published_at: "2026-11-10T16:17:13+00:00"
first_seen_at: "2026-11-10T16:22:32+00:00"
updated_at: "2026-11-10T16:23:33+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105669", "first_seen_at": "2026-11-10T16:22:32+00:00"}]
exploit_sources: []
---

# Ivanti Sentry: admin argument injection runs arbitrary on-disk binaries remotely

Link for people: https://infrastack.ai/live/CVE-2026-105669 (this .md is for agents)

Ivanti Sentry, a gateway that sits between users and internal resources, fails to sanitize arguments, so an attacker with admin rights can run arbitrary binaries already on the disk. The attacker needs admin access first, so the flaw mainly matters for insider or stolen-admin scenarios.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Ivanti Sentry affected range not listed fixed no fixed version listed

## How to check

- Check the installed Ivanti Sentry version in the admin console; the sources say versions before `10.8.3` and `10.7.4` are affected.
- Confirm whether admin accounts are restricted and whether admin access is reachable from the internet.

## Fix

- Move to `10.8.3` or `10.7.4` (the fixed versions named in the description).

## Timeline

- 2026-11-10T16:22:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105669

## From the sources

Argument injection in Ivanti Sentry before version 10.8.3 and 10.7.4 allows a remote authenticated attacker with admin privileges to execute arbitrary on-disk binaries.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_