CISA 2026-10-13

Inductive Automation Ignition Software

CVE-2026-92817

Machine-generated analysis · WAYSCloud LLM

The Ignition Perspective module can let an authenticated low-level user obtain Designer-level privileges.

Context

Inductive Automation Ignition is an industrial application platform that includes a Perspective module. The advisory states that the module fails to validate session privileges, allowing privilege escalation and potential arbitrary code execution in the Ignition Gateway process. The vulnerability affects versions 8.1.0-8.1.54 and 8.3.0-8.3.8. Inductive Automation has released patches in versions 8.1.55 and 8.3.9.

Operator considerations

Check: Verify the installed Ignition version is not within the affected ranges.
Patch: Update to version 8.1.55 or 8.3.9 as provided by Inductive Automation.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level.

The following versions of Inductive Automation Ignition Software are affected:

Ignition >=8.1.0|=8.3.0|=8.1.0|=8.3.0|

Read the full advisory on CISA →