What is GHSA-pcxg-3wcp-p2fq?

GHSA-pcxg-3wcp-p2fq is a security advisory published by GitHub Security Advisories with High severity. A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge...

Which CVE IDs does GHSA-pcxg-3wcp-p2fq cover?

GHSA-pcxg-3wcp-p2fq covers the following CVE IDs: CVE-2026-110746. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pcxg-3wcp-p2fq?

GHSA-pcxg-3wcp-p2fq has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-pcxg-3wcp-p2fqHighCVSS 7.8

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge...

Vendor

GitHub Security Advisories

Published

October 15, 2026

Last Modified

October 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-110746 →

📋 Description

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-110746
https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/TotalAV-7.1.17-LPE/TotalAV_LPE.c
https://github.com/lukehebe/Vulnerability-Disclosures/tree/main/TotalAV-7.1.17-LPE
https://www.totalav.com
https://github.com/advisories/GHSA-pcxg-3wcp-p2fq