CVE-2026-4129
Received Received - Intake

Improper Access Control in NI SystemLink Allows File Access

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: National Instruments

Description
There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server 2026 Q3 and prior versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-10
Last Modified
2026-09-10
Generated
2026-09-10
AI Q&A
2026-09-10
EPSS Evaluated
N/A
NVD
CVE-2026-4129
EUVD
EUVD-2026-75564

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ni systemlink to 2026_q3 (inc)
ni systemlink_server to 2026_q3 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-4129 is an improper access control vulnerability in NI SystemLink and NI SystemLink Server versions up to 2026 Q3. It allows an authenticated user with limited privileges to access host operating system files and directories that should be restricted.

Detection Guidance

NI does not provide specific detection commands for this vulnerability in the provided resources. The recommended mitigation is upgrading to NI SystemLink 2026 Q3 Patch 1 or later via NI Package Manager or Software Downloads.

Impact Analysis

An attacker with limited access could exploit this to read sensitive files on the host system, potentially leading to data leaks, unauthorized modifications, or further system compromise. This could affect confidentiality and integrity of system data.

Compliance Impact

This vulnerability may violate compliance requirements that mandate strict access controls for sensitive data, such as GDPR's data protection principles or HIPAA's safeguards for protected health information. Unauthorized access risks non-compliance and potential penalties.

Mitigation Strategies

Upgrade to NI SystemLink 2026 Q3 Patch 1 or later using NI Package Manager or Software Downloads to address the improper access control vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-4129. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart