Back Scworld Logitech Options+ vulnerability allows SYSTEM-level privilege escalation | brief
A critical vulnerability in Logitech Options+ software has been discovered, allowing standard Windows users to gain SYSTEM-level privileges. This flaw, tracked as CVE-2026-12518, requires no administrator rights, network access, or additional user interaction for exploitation, according to a recent report by Cyber Insider.
The vulnerability was found in the software's updater service, which runs with extensive operating system access. Security researcher Jake Bolam of AmberWolf Research identified that weaknesses in how the software trusted local processes and handled installation files could be chained together. A standard user could manipulate their own instance of a trusted process to relay commands to the updater, bypassing intended restrictions. Further analysis revealed that the updater accepted user-controlled values that could influence where installation files were loaded from, and a privileged installation routine skipped certificate validation.
Source: Cyber Insider
SC Staff September 15, 2026
SC Staff September 15, 2026
Nathan Smolenski September 14, 2026
Get daily
You can skip this ad in 5 seconds
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
