HAVELSAN Liman Render Engine: Privilege escalation (CVE-2026-119474)
An incorrect permission assignment vulnerability in HAVELSAN Liman Render Engine versions prior to 1.2-81 allows an attacker to gain elevated privileges.
CVE search metadata
CVE search record: CVE-2026-119474. Severity: high. CVSS: 7.8. KEV: no. Product: Liman Render Engine (< 1.2-81). Brief: HAVELSAN Liman Render Engine: Privilege escalation (CVE-2026-119474). Brief link: https://feed.craftedsignal.io/briefs/2026-11-liman-render-privesc/
Triage facts
Revision 1- Applicability
- Liman Render Engine (< 1.2-81)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Nov 9, 17:49 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
The HAVELSAN Liman Render Engine contains an incorrect permission assignment vulnerability (CVE-2026-119474) that permits local privilege escalation. This vulnerability allows an attacker to gain unauthorized elevated rights on a system where the affected software is installed. The vulnerability affects all versions of Liman Render Engine prior to 1.2-81.
Impact
Successful exploitation of this vulnerability allows an attacker to escalate privileges on the host system, potentially leading to full system compromise depending on the context in which the service or application is running.
Recommendation
- Upgrade to HAVELSAN Liman Render Engine version 1.2-81 or later to remediate the permission assignment flaw.
- Review local user and service account permissions on systems hosting Liman Render Engine to ensure the principle of least privilege is enforced until the patch can be applied.
- Audit logs for unexpected process execution from accounts associated with the Liman Render service.
Immediate actions
Patch Liman Render Engine to version 1.2-81 or later.
Threat Hunt
Monitor for Liman Render Engine processes spawning unexpected child processes or executing commands with elevated privileges.
Data: Process creation logs (Event ID 1), Process integrity level changes
Mitigations
Upgrade to Liman Render Engine 1.2-81.
CVE-2026-119474