Incorrect authorization in Gaia - CVE-2026-120490
Published: November 13, 2026
Vulnerability identifier: #VU166154
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-120490
CWE-ID: CWE-863
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote privileged user to execute operating system commands and write files on the Gateway with superuser privileges.
The vulnerability exists due to improper access control in the Scalable Platform Gateway's Sync traffic protection when processing traffic with a translated destination. A remote privileged user can use permissions to edit and install the Access Control Policy and NAT rules to create a NAT rule that redirects traffic to the Sync interface, bypassing its protection to execute operating system commands and write files with superuser privileges.
Affected software
Gaia
How to mitigate CVE-2026-120490
Install security update from vendor's website.
Gaia - addressed in versions R81.20 Take 174, R82 Take 132