Privilege Escalation in Kandji Agent via XPC Client Validation Gap
CVE-2026-39118 is a local privilege-escalation issue in Iru, Inc. Kandji Agent before version 4.7.5(5374). According to the provided content, the flaw is a client validation gap that allows a local attacker to invoke restricted agent functionality. The issue is associated with weak validation of privileged XPC client requests in the Kandji Agent on macOS, enabling an unprivileged local user to impersonate or otherwise satisfy insufficient trust checks and access privileged agent operations that should be restricted. XM Cyber reported demonstrating this in a broader macOS attack chain involving trusted-component impersonation and privileged XPC method invocation, resulting in permanent deactivation of Kandji MDM by clearing EDR guards and terminating the Endpoint Security Framework extension.
Are you exposed to this one?
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
Impact, mitigation & remediation
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
Impact
What an attacker gets, and what they’ve been doing with it.
Mitigation
If you can’t patch tonight, do this now.
Remediation
Patch, then assume compromise.
Exploits
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
Affected products & vendors
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
Recent activity
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A vulnerability assigned by Kandji related to a macOS attack chain that abuses weakly-validated XPC connections, malicious Interface Builder payload injection, and trust cache persistence to disable security tooling and deactivate Kandji MDM from a standard user account.
A Kandji MDM-related flaw in a macOS attack chain that allowed a standard non-admin user to permanently deactivate the agent by abusing legitimate macOS behavior and privileged XPC interactions.
A macOS privilege-escalation vulnerability involving CDHash trust caching and NIB injection that allows a standard user to impersonate trusted application components and invoke privileged XPC services, enabling disabling of security tools without administrator privileges.
The version that knows your environment.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.