CVE-2026-116596

Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.

Published

2026-10-26

Modified

2026-10-26

Record from

the NVD, synced 2026-10-26

References

• https://medium.com/@alisaifeldin/cve-2026-116596-local-privilege-escalation-in-pyrus-sync-for-windows-0fe2417dc8cf
• https://pyrus.com/en/pyrus-sync

Check your stackJSON