CVE-2026-13121
Received Received - Intake

Local Privilege Escalation in Parallels RAS Client RDP Backend

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: Zero Day Initiative

Description
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the RAS RDP Backend Service. The issue results from an exposed dangerous function. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-29220.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
CVE-2026-13121
EUVD
EUVD-2026-63461

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
parallels ras_client *
parallels ras_client to 21.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-749 The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a local privilege escalation flaw in Parallels RAS Client. It exists in the RAS RDP Backend Service due to an exposed dangerous function. Attackers with low-privileged code execution can exploit it to escalate privileges to SYSTEM level and execute arbitrary code.

Detection Guidance

Detecting this vulnerability requires checking the installed version of Parallels RAS Client. Run 'rasclient --version' or check the installed program version in system settings. If the version is prior to 21.2, the system is vulnerable.

Impact Analysis

If exploited, this vulnerability allows attackers to gain full control over the affected system, compromising confidentiality, integrity, and availability. It requires local access but can lead to complete system takeover.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating compliance requirements for GDPR and HIPAA. Organizations must address it to maintain data protection standards and avoid regulatory penalties.

Mitigation Strategies

Update Parallels RAS Client to version 21.2 or later immediately. Disable the RAS RDP Backend Service if not required. Restrict local user permissions to minimize attack surface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-13121. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart