Guardicore Platform Agent vulnerabilities

3 known vulnerabilities in Guardicore Platform Agent from Akamai. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  Guardicore Platform Agent: Improper Control of Resource Identifiers

  CVE-2026-50218Oct 14, 2026Akamai

  Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the

• 7.4 High severity

  Guardicore Platform Agent: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2026-34354May 8, 2026Akamai

  Akamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation. The GPA service creates an IPC socket in the world-writable /tmp directory. It accepts unauthenticated IPC control messages. This ena

• 7.8 High severity

  Guardicore Platform Agent: Inclusion of Functionality from Untrusted Control Sphere

  CVE-2025-53841Dec 3, 2025Akamai

  The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration