---
id: CVE-2026-110746
title: >-
  A local privilege escalation vulnerability in TotalAV allows an unprivileged
  local user to forge the gRPC IPC authentication token, through loading IPC.dll
  and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT
  AUT…
summary: >-
  A local privilege escalation vulnerability in TotalAV allows an unprivileged
  local user to forge the gRPC IPC authentication token, through loading IPC.dll
  and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT
  AUT…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-22
  - CWE-23
  - CWE-273
vendor: TotalSecurity
product: TotalAV
affected:
  - TotalAV <= 7.1.17
published: '2026-10-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T16:17:46.450'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-110746'
references:
  - url: >-
      https://github.com/lukehebe/Vulnerability-Disclosures/tree/main/TotalAV-7.1.17-LPE
    label: cret@cert.org
  - url: 'https://www.totalav.com/'
    label: cret@cert.org
  - url: >-
      https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/TotalAV-7.1.17-LPE/TotalAV_LPE.c
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T15:15:59.338352Z'
ingestedAt: '2026-10-15T15:09:08.442Z'
---

## Overview

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.