CODESYS Development System - Incorrect Default Permissions
Two local privilege escalation vulnerabilities were identified in the CODESYS Development System. Specifically, the PackageManager and the IPM create temporary directories with insecure default permissions when executed with administrative privileges. This allows low-privileged local users to modify a temporary bootstrap file to force the deployment of arbitrary components, or to exploit a Time-of-Check to Time-of-Use (TOCTOU) race condition to replace digitally verified installation files with malicious ones prior to installation. Both flaws bypass intended security boundaries during the installation of packages or add-ons.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-44469US | high7.0OT elevated | — | ||
The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileged local attacker can… | ||||
| CVE-2026-44468US | —OT elevated | — | ||
The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to modify a temporary fil… | ||||
references
External citations — patches, advisories, analysis.
- Advisory2026-09_VDE-2026-055: CODESYS Development System - Incorrect Default Permissions - PDFself
- Advisory2026-09_VDE-2026-055: CODESYS Development System - Incorrect Default Permissions - CSAFself
- Advisory2026-09_VDE-2026-055: CODESYS Development System - Incorrect Default Permissions - HTMLself
- CERT@VDE Security Advisories for CODESYS GmbHexternal
- CODESYS Security Advisoriesexternal
remediations (2)
- FixedCODESYS Development System
Update the following product to version 3.5.22.20. * CODESYS Development System The CODESYS Development System and the products available as CODESYS add-ons can be downloaded and installed directly with the CODESYS Installer or be downloaded from the CODESYS Store. Alternatively, as well as for all other products, you will find further information on obtaining the software update in the CODESYS Update area https://www.codesys.com/download/.
- FixedCODESYS Development System
Update the following product to version 3.5.22.20. * CODESYS Development System The CODESYS Development System and the products available as CODESYS add-ons can be downloaded and installed directly with the CODESYS Installer or be downloaded from the CODESYS Store. Alternatively, as well as for all other products, you will find further information on obtaining the software update in the CODESYS Update area https://www.codesys.com/download/.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan