CISA Advises Mitigation for Inductive Automation Ignition Privilege Escalation Vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) published Industrial Control Systems Advisory ICSA-26-286-01 on October 13, 2026, disclosing a vulnerability in Inductive Automation Ignition software. The issue tracks as CVE-2026-92817 and stems from incorrect authorization in the Ignition Perspective module.

According to the advisory, an authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker exploiting these elevated privileges could execute arbitrary code in the context of the Ignition Gateway process.

The vulnerability affects two product lines: Ignition versions 8.1.0 through 8.1.54, and Ignition versions 8.3.0 through 8.3.8. CVSS 3.1 metrics assign a base score of 8.8, classified as HIGH, with the vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Inductive Automation released version 8.3.9 in August 2025 and version 8.1.55 in September 2026 to address the issue. CISA recommends users update to the newest version available. Additional defensive guidance includes minimizing network exposure for control system devices, ensuring systems are not internet-accessible, and locating control system networks behind firewalls isolated from business networks. CISA also notes that no known public exploitation specifically targeting this vulnerability has been reported at the time of the advisory.