CVE-2026-9789: NitroSense V3: Security Vulnerability Information

Synopsis

A local privilege escalation vulnerability affects Acer NitroSense software versions up to and including 3.01.3052. The PSAdminAgent service creates a Named Pipe with a weak access control list, allowing any authenticated local user to connect and issue commands without privilege checks. Successful exploitation lets a low-privileged local user delete arbitrary files with SYSTEM-level authority, enabling tampering with protected system files, persistent access, or denial of service. No fix version has been published; HarborGuard tracks this advisory for patch availability.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no network access to the target is required.

• AuthenticationRequired

  Any low-privilege local account is sufficient to connect to the Named Pipe and issue commands.

• Victim interactionNot required

  No victim interaction is needed; the attacker operates entirely through their own session.

• Attack complexityDetail

  The exploit is reliable and condition-free; no race conditions or specific memory layout requirements are necessary.

Blast Radius

• Deletes arbitrary files on the host with SYSTEM authority, including protected OS binaries and security tooling.
• Overwrites or removes authentication-related files, enabling persistent unauthorized access or account takeover.
• Disrupts running services by deleting their dependencies or configuration files, causing denial of service.
• Facilitates further privilege escalation by removing access-control enforcement files or audit logs.