CISA flags high-severity privilege-escalation flaw in Inductive Automation's Ignition platform
CISA has published an ICS advisory on a CVSS 8.8 authorization flaw in Inductive Automation's Ignition software, used across critical manufacturing, energy and IT sectors worldwide. This segment covers what the vulnerability allows, which versions are affected, the fixed builds, and the defensive measures CISA sets out for operators running the platform on control-system networks.
- CVE-2026-92817 allows an authenticated low-level user to escalate to Designer-level access and run arbitrary code on the Ignition Gateway.
- Affected builds are Ignition 8.1.0-8.1.54 and 8.3.0-8.3.8; fixes shipped in 8.3.9 (August 2025) and 8.1.55 (September 2026).
- CVSS v3.1 base score is 8.8 (HIGH); CISA reports no known public exploitation targeting the flaw at this time.