CVE-2026-50218
8.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-99
Impact
Attackers can reconfigure the client and compromise its functionality by injecting arbitrary parameters via spoofed tokens. To execute this, the attacker needs the user to click a malicious link or must know the client's enrollment IDP URL.
Root cause
The client improperly validates JWT tokens used during seeding, allowing parameter injection.
Affected systems
Akamai GPA (Guardicore Platform Agent) client on all platforms prior to version 7.4.
CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Fix & remediation
Upgrade the Guardicore Platform Agent client to version 7.4 or later across all endpoints; no interim mitigation is documented.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in unauthorized reconfiguration and full compromise of the application's functionality. This attack can also be targeted against an already seeded client if the attacker knows the URL of the IDP that the client used for enrollment.