Medium severity · published Oct 13, 2026
CVE-2026-4869
Potential Privilege Escalation in InstallShield
5.4
CVSS
0.1%
EPSS
No
On KEV
Description
A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Prerequisites from an unsecured location, the Prerequisite installers also might load from an unsecured location, potentially leading to privilege escalation.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
InstallShield · Flexera
through 2025 R2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-4869
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-4869
community.revenera.com
https://community.revenera.com/s/article/CVE-2026-4869-Potential-Privilege-Escalation-in-InstallShield-2025-R2-running-Setup-Prerequisites-from-an-insecure-directory
More from InstallShield
7.8
CVE-2016-2542
Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a…
5.5
CVE-2023-29081
InstallShield Symlink Vulnerability Affecting Suite Project Setups
