CVE-2026-39118: An issue in Iru, Inc Kandji Agent before v

Synopsis

A privilege escalation vulnerability affects the Kandji Agent (versions before 4.7.5 build 5374), a macOS device management agent. The flaw is reachable locally, without any credentials, and requires no user interaction, meaning any process or unprivileged shell on the host can trigger it. Successful exploitation gives an attacker full control over confidentiality, integrity, and availability of the affected system by invoking restricted agent functionality that is normally off-limits to non-privileged callers. HarborGuard is tracking this advisory and will make a patched-image rebuild available as soon as an upstream fix version is published.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no network access is required to reach the vulnerable component.

• AuthenticationNot required

  No credentials or account privileges are needed; any local process can attempt to invoke the restricted agent functionality.

• Victim interactionNot required

  Exploitation is fully attacker-driven and requires no action from any user on the system.

• Attack complexityDetail

  The exploit is reliable and condition-free; no race conditions, memory layout dependencies, or special environmental factors are required.

Blast Radius

• A successful attacker reads any file or credential accessible to the agent process, including device management secrets and stored configuration.
• The attacker writes to or modifies system state managed by the Kandji Agent, including policy enforcement records and managed preferences.
• The attacker can crash or disable the agent entirely, removing device management oversight from the host.
• Because the agent typically runs with elevated system privileges, full local privilege escalation to root or equivalent is achievable.