What is GHSA-3pwx-5g7f-2mvm?

GHSA-3pwx-5g7f-2mvm is a security advisory published by GitHub Security Advisories with Medium severity. Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec...

Which CVE IDs does GHSA-3pwx-5g7f-2mvm cover?

GHSA-3pwx-5g7f-2mvm covers the following CVE IDs: CVE-2026-77654. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-3pwx-5g7f-2mvmMedium

Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec...

Vendor

GitHub Security Advisories

Published

September 8, 2026

Last Modified

September 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-77654 →

📋 Description

Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection.

A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.

This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-77654
https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm
https://github.com/advisories/GHSA-3pwx-5g7f-2mvm