Cyber Security· Important
CISA warns of high-severity privilege escalation flaw in Inductive Automation Ignition
CISA published an advisory for CVE-2026-92817, an incorrect authorization vulnerability in the Perspective module of Inductive Automation's Ignition software. An authenticated low-privilege user with access to a Vision project can reuse a valid Vision session identifier to gain Designer-level privileges, potentially leading to arbitrary code execution in the Ignition Gateway process. Affected versions include Ignition 8.1.0 through 8.1.54 and 8.3.0 through 8.3.8. The vendor has released fixed versions 8.3.9 and 8.1.55.