---
id: "CVE-2026-122169"
page: "https://infrastack.ai/live/CVE-2026-122169"
kind: "vulnerability"
aliases: ["CVE-2026-122169"]
title: "Windows IKE Extension: access control flaw lets a local user spoof"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "ipsec", "vpn", "windows"]
not_affected_if: ["non-windows-systems"]
published_at: "2026-11-10T19:20:34+00:00"
first_seen_at: "2026-11-10T19:25:10+00:00"
updated_at: "2026-11-10T19:44:18+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-122169", "first_seen_at": "2026-11-10T19:25:10+00:00"}]
exploit_sources: []
---

# Windows IKE Extension: access control flaw lets a local user spoof

Link for people: https://infrastack.ai/live/CVE-2026-122169 (this .md is for agents)

The Windows IKE Extension, which handles IPsec key exchange, has an access control check that is too coarse. An authorized local attacker can perform spoofing on the machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the Windows build with `winver` against the Microsoft update history for CVE-2026-122169
- Confirm whether IPsec or VPN features using the IKE Extension are in use

## Timeline

- 2026-11-10T19:25:10+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-122169

## From the sources

Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_