CrowdStrike Falcon Sensor Local Privilege Escalation (CVE-2026-40058 / FalconFlank)

Language:

Version 1.5 Nov 4, 2026, 6:52 PM Logic Changes (Prevent false positives on newer versions of the software) Plugin Feed: 202611041852
Version 1.4 Oct 23, 2026, 5:56 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202610231756
Version 1.3 Oct 12, 2026, 4:41 PM Detection (Add double-quote and carriage return to command injection check.. enumerate MS-Agent MCP servers from ~/.ms_agent/mcp.json and mcp_servers.json. enumerate MS-Agent MCP servers from %USERPROFILE%\.ms_agent\mcp.json and mcp_servers.json) Plugin Feed: 202610121641
Version 1.2 Sep 28, 2026, 8:04 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploit available" set to "False") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202609280804
Version 1.1 Sep 25, 2026, 6:49 PM New Plugin Feed: 202609251849

* Changelogs are generally available for changes made after Nov 1, 2022