Medium severity5.5NVD Advisory· Published Dec 16, 2022· Updated Jun 17, 2026

CVE-2022-4326

Description

Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality.

Affected products

Trellix/Endpoint Hx Agent (xagent)llm-fuzzy
Range: <V35.31.22
Trellix/xAgentv5
Range: 0

Patches

Vulnerability mechanics

References

docs.trellix.com/bundle/xagent_35-31-22_rn/page/UUID-73c848e7-6107-fe11-d83d-b17bd5b1449c.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000