CVE-2022-4326: Trellix Endpoint Security

Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality.

Affected products

• Trellix Endpoint Security: before 35.31.22 (fixed in 35.31.22)

Published 2022-12-16. Last modified 2026-06-17.