# named-pipe

Published articles for named-pipe.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability

DevFeed: [ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability](<https://devfeed.tech/articles/zdi-26-773-nomachine-named-pipe-incorrect-permission-assignment-local-privilege-escalation-vulnerability-91816.md>)

Original publisher: [Read original article](<http://www.zerodayinitiative.com/advisories/ZDI-26-773/>)

Published: 2026-10-15T05:00:00Z

Content type: news

Language: en

Sources: [Zero Day Initiative](<https://devfeed.tech/sources/zero-day-initiative.md>)

Topics: [Exploit](<https://devfeed.tech/topics/exploit.md>), [permission](<https://devfeed.tech/topics/permission.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [local](<https://devfeed.tech/tags/local.md>), [local-privilege-escalation](<https://devfeed.tech/tags/local-privilege-escalation.md>), [named-pipe](<https://devfeed.tech/tags/named-pipe.md>), [nomachine](<https://devfeed.tech/tags/nomachine.md>), [permission](<https://devfeed.tech/tags/permission.md>), [privilege-escalation](<https://devfeed.tech/tags/privilege-escalation.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

A permissions flaw in NoMachine Device Service's named pipe lets a local attacker with the ability to run low-privileged code escalate privileges and execute arbitrary code as SYSTEM. The ZDI assigns CVSS 7.8 and identifies CVE-2026-111184. The advisory says it is fixed in versions 10, 9, and 8; it does not specify affected releases.

### Source excerpt

This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-111184.