CVE-2026-45170: Idira Privilege Cloud Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation

Synopsis

Incomplete TLS certificate validation in CyberArk Idira Privilege Cloud Connector (versions 1.1.0 through before 1.1.100504) allows a network-adjacent attacker, under specific configuration conditions, to bypass certificate checks. No authentication is required, though the attacker must be positioned on the same network segment, LAN, or VPN and must elicit some interaction from the victim. Successful exploitation gives the attacker full read, write, and availability impact on the connector, enabling credential interception, session hijacking, or disruption of privileged access workflows. A patched-image rebuild at version 1.1.100504 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityDetail

  The attacker must be positioned on an adjacent network, LAN, or VPN segment; remote exploitation over the open internet is not possible with this attack vector.

• AuthenticationNot required

  No credentials or prior account access are needed to attempt the attack.

• Victim interactionRequired

  The attack requires some level of interaction from a person on the target system, introducing a social-engineering or timing dependency.

• Attack complexityDetail

  Exploitation is generally reliable but depends on specific configuration scenarios or environmental conditions being present (AT:P), meaning the attacker may need to wait for or trigger a particular state.

Blast Radius

• Reads plaintext credentials or session tokens in transit between the connector and the privileged access management backend.
• Modifies commands or responses in the TLS stream, allowing injection of unauthorized privileged-session instructions.
• Crashes or disrupts the connector service, blocking privileged access workflows for administrators and managed accounts.
• Combines credential capture with session replay to pivot into downstream privileged systems managed by the connector.