7.5highHigh
CVE-2026-9128
Rockwellautomation Studio 5000 Logix Designer
A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because these paths contain spaces, the operating system may resolve them to unintended executables placed earlier in the search order. If exploited, an attacker could plant a malicious executable in a location within the search path, resulting in arbitrary code execution with the same permissions of the user running the application.
Exploitation status
- A vendor advisory or patch reference has been published.
What the metrics mean
- It is requires local access to the machine.
- For an attacker who can reach it, exploitation depends on conditions outside the attacker's control.
- To exploit it, an ordinary user account is needed.
- Beyond that, someone has to be persuaded to take an action first.
Scoring
- CVSS
- 7.5 (v3.1)
- Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H- CVSS v4
- 7.3
- Weakness
- CWE-428
- Assigned by
- PSIRT@rockwellautomation.com
Dates
- Published
- 2026-07-14
- Last modified
- 2026-08-25
- Sources
- NVD
Affected products
- Rockwellautomation Studio 5000 Logix Designer- 32.05, 33.00 - 33.03, 34.00 - 34.03, 35.00
As listed in the NVD configuration data. Not a statement about your estate.