{"id":"CVE-2026-116596","title":"CVE-2026-116596","summary":"Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISync…","severity":"none","cwe":["CWE-266"],"vendor":"Pyrus","product":"Pyrus Sync","affected":["sync < 1.8.745.0"],"published":"2026-10-26","updated":"2026-10-26","sourceUpdated":"2026-10-26T16:17:29.178Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116596","references":[{"url":"https://pyrus.com/en/pyrus-sync"},{"url":"https://medium.com/@alisaifeldin/cve-2026-116596-local-privilege-escalation-in-pyrus-sync-for-windows-0fe2417dc8cf"}],"tags":["cve.org"],"ingestedAt":"2026-10-26T16:31:40.054Z","slug":"CVE-2026-116596","body":"## Overview\n\nPyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.\n\n## Affected\n\n- `sync < 1.8.745.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}