# Tenable Nessus Agent.

Every CVE that names Tenable Nessus Agent among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Local Privilege Escalation](https://agentprime.io/advisories/CVE-2025-36640.md)
  `CVE-2025-36640` · CVE record: Tenable Nessus Agent · CVSS 7.3 High · Not analysed yet · Published 13 Jan 2026 · Tags: Privilege escalation
- [Incorrect default permissions in Tenable Nessus Agent](https://agentprime.io/advisories/CVE-2025-24915.md)
  `CVE-2025-24915` · CVE record: Tenable Nessus Agent · CVSS 7.8 High · Not analysed yet · Published 21 Mar 2025 · Tags: Broken access control
- [Race Condition](https://agentprime.io/advisories/CVE-2024-3292.md)
  `CVE-2024-3292` · CVE record: Tenable Nessus Agent · CVSS 8.2 High · Not analysed yet · Published 17 May 2024 · Tags: Race condition
- [Privilege Escalation](https://agentprime.io/advisories/CVE-2024-3291.md)
  `CVE-2024-3291` · CVE record: Tenable Nessus Agent · CVSS 7.8 High · Not analysed yet · Published 17 May 2024 · Tags: CWE-281
- [Local Privilege Escalation](https://agentprime.io/advisories/CVE-2024-2390.md)
  `CVE-2024-2390` · CVE record: Tenable Nessus Agent and 1 more · CVSS 7.8 High · Not analysed yet · Published 18 Mar 2024 · Tags: Privilege escalation
- [An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote…](https://agentprime.io/advisories/CVE-2023-6178.md)
  `CVE-2023-6178` · CVE record: Tenable Nessus Agent · CVSS 6.8 Medium · Not analysed yet · Published 20 Nov 2023
- [Improper privilege management in Tenable Nessus and others](https://agentprime.io/advisories/CVE-2023-5847.md)
  `CVE-2023-5847` · CVE record: Tenable Nessus and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Privilege escalation
- [Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when installed on an Amazon EC2…](https://agentprime.io/advisories/CVE-2021-20077.md)
  `CVE-2021-20077` · CVE record: Tenable Nessus Agent · No CVSS score · Not analysed yet · Published 19 Mar 2021

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=tenable-nessus-agent>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/tenable-nessus-agent/>. Everything for agents: <https://agentprime.io/llms.txt>.