Machine-generated analysis · WAYSCloud LLM
OPCFoundation OPC UA LocalDiscoveryServer installers earlier than version 1.04.420 are vulnerable to privilege escalation during installation.
Context
The advisory concerns OPCFoundation OPC UA LocalDiscoveryServer (LDS) installer packages. CVE-2026-77477 permits an attacker who can launch the installer with elevated privileges and has physical access to the keyboard and display to intercept the high-privilege console window and run arbitrary commands. The product is reported as deployed worldwide in chemical, energy, food and agriculture, water and wastewater, and critical manufacturing sectors.
Operator considerations
Check: Verify the version of any installed OPC UA LDS installer and confirm it is 1.04.420 or newer.
Successful exploitation of this vulnerability could allow an attacker to take control of a high-privilege terminal during installation and run arbitrary commands.
Read the full advisory on CISA →