[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-ignition-patches-high-severity-privilege-escalation-flaw":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},11550,"ignition-patches-high-severity-privilege-escalation-flaw","Ignition Patches High Severity Privilege Escalation Flaw","A months-old bug in widely used industrial control software let low-level users escalate privileges, and CISA says a patch has existed since August 2025.","A privilege escalation bug in Ignition, the industrial control platform, lets low-level users grant themselves admin access.\n\nCISA published an advisory this week for a high-severity flaw in Inductive Automation's Ignition software, which runs control systems at factories and utilities. The bug, tracked as CWE-863 for incorrect authorization, carries a CVSS 3.1 score of 8.8 out of 10. An authenticated user with only low-level permissions can exploit it remotely, without any user interaction, to gain full read, write, and availability impact. Researcher Tim Hemingway reported the flaw to Inductive Automation, which fixed it in version 8.3.9 and, separately, in version 8.1.55.\n\nIgnition sits underneath plenty of industrial processes, so a bug that turns a low-trust account into an admin account is not a theoretical risk. It is a shortcut to controlling real equipment. CISA reports no known public exploitation so far, but that is small comfort on ICS networks where patching means scheduled downtime, not a quick restart.\n\nThe fix for the 8.3 branch has been sitting in version 8.3.9 since August 2025. This advisory is less a fire alarm than a reminder that plenty of plants still haven't gotten around to installing it.","[\"ics-security\",\"inductive-automation\",\"ignition\",\"privilege-escalation\"]","2026-10-13T12:00:00.000Z","2026-10-14T00:39:22.341Z","2026-10-14T00:39:32.485Z","published",null,[],"security",[26,27,28,29],"ics-security","inductive-automation","ignition","privilege-escalation",[31],{"name":32,"url":33},"CISA Advisories","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-26-286-01",0,{"sections":36},[37,42,46,51,56,61,66,71,76,81,86,91,96,101],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",6990,"2026-10-13T20:09:54.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":45},"Security",977,"2026-10-14T01:30:42.000Z",{"name":47,"slug":48,"count":49,"latest_published_at":50},"Policy","policy",505,"2026-10-13T22:48:12.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",501,"2026-10-13T22:00:00.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Hardware","hardware",252,"2026-10-14T00:42:28.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Consumer Tech","consumer-tech",213,"2026-10-14T00:44:32.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Science","science",201,"2026-10-13T23:13:31.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Startups","startups",132,"2026-10-13T21:15:00.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Software","software",123,"2026-10-13T21:33:43.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Dev Tools","dev-tools",116,"2026-10-13T16:20:18.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"General","general",77,"2026-10-13T22:42:18.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"Gaming","gaming",65,"2026-10-13T19:00:48.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Reviews","reviews",36,"2026-10-13T18:00:00.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]