CVE-2026-90999

Summary

Sentry Seer is vulnerable to a multi-stage trust-boundary violation allowing unauthenticated attackers to execute arbitrary code through crafted telemetry events.

Exploitability

Exploitation requires an external attacker to submit fabricated events, but no specific access to the victim’s account or infrastructure is needed.

Blast radius

If exploited, the vulnerability could lead to full control over the privileged automation environment, potentially leading to significant data loss or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected feature or restrict access to the telemetry submission endpoint.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.