Input validation error in Zero Trust Client for Linux and Zero Trust Client for macOS - CVE-2026-34354

Vulnerability identifier: #VU130261

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-34354

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to an unspecified vulnerability. A local user can execute arbitrary code with root privileges. 

Zero Trust Client for Linux
Guardicore Platform Agent for Linux
Guardicore Platform Agent for macOS
Zero Trust Client for macOS

Install updates from vendor's website.

Zero Trust Client for Linux - update to 6.1.6
Zero Trust Client for macOS - update to 6.1.6
Guardicore Platform Agent for Linux - update to 7.3.2
Guardicore Platform Agent for macOS - update to 7.3.2

• https://techdocs.akamai.com/zero-trust-client/v2/changelog/apr-9-2026-akamai-zero-trust-client-616-general-availability

• Privilege escalation in Akamai Zero Trust Client for macOS and Linux
• Privilege escalation in Akamai Guardicore Platform Agent for Linux and macOS