Improper access control in TXOne Networks SafePortAgent
Priority LOW 29CWE-284Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-284.
Summary
Improper Access Control vulnerability in the Removable Media Validation function of TXOne Networks products allows a local attacker with administrator privileges to bypass the file lockdown mechanism, resulting in unauthorized file transfer to the victim device. The attacker needs to deploy unauthorized file on the removable media in advance. This issue affects SafePortAgent: before 3.2.5024; StellarProtect: from 3.2.4011 before 5.0.1083.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0015 4th percentileScored 2026-11-07
Fix Fixed SafePortAgent (TXOne Networks): 3.2.5024StellarProtect (TXOne Networks): 5.0.1083
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| TXOne Networks | SafePortAgent | before 3.2.5024 | 3.2.5024 | Patch available | CNA |
| TXOne Networks | StellarProtect | 3.2.4011 to before 5.0.1083 | 5.0.1083 | Patch available | CNA |
- SafePortAgent VendorTXOne Networks Affected before 3.2.5024 Fixed in 3.2.5024 Patch available CNA
- StellarProtect VendorTXOne Networks Affected 3.2.4011 to before 5.0.1083 Fixed in 5.0.1083 Patch available CNA
Remediation
- Fix · CNA SafePortAgent (TXOne Networks) Fixed in 3.2.5024
- Fix · CNA StellarProtect (TXOne Networks) Fixed in 5.0.1083
Timeline
- 2026-10-02 Threatist record created from CVE-2026-41993
- 2026-10-03 Alias added: GHSA-29w9-32wg-pfh2
References
More TXOne Networks vulnerabilities
- TI-2024-32180 TXOne Networks Portable Inspector Management Program Improper Input Validation Vulnerability CVSS 4.0MEDIUM 6.9
- TI-2024-32181 TXOne Networks StellarProtect (Legacy Mode), StellarEnforce, and Safe Lock Improper… CVSS 4.0MEDIUM 5.4
Sources
- CVE-2026-41993 · CVE Program
- CVE-2026-41993 · NVD
- FIRST EPSS
- GHSA-29w9-32wg-pfh2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences