CVE-2022-29594: eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.

Q: How do I fix CVE-2022-29594?

eg agent: upgrade to newer than 7.1.11; eg manager: upgrade to newer than 7.1.8; eg rum collectors: upgrade to 7.2. Exact commands for each OS are on this page.

Q: Is CVE-2022-29594 being exploited?

CVE-2022-29594 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2022-29594 affect?

CVE-2022-29594 affects eg agent, eg manager, eg rum collectors. Severity is high (CVSS 7.8). eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.

Q: How urgent is CVE-2022-29594?

Priority 38/100. High severity; Public exploit reference

Routine

HIGH 7.8UPGRADEUPGRADEUPGRADE

CVE-2022-29594 is a high-severity flaw (CVSS 7.8) affecting eg agent, eg manager, eg rum collectors. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.

Why this priority

High severity
Public exploit reference

A fixed release or distro patch exists.

Risk facts

CVSS score	7.8 (High)
Attack vector	Local
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	0.3% (top 77%)
CISA exploited list	No
Weakness	CWE-281
Published	2022-06-02
Last modified	2026-06-17

Publisher (CNA): MITRE · Vendor: eginnovations

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2022-06-02 23:15 UTCPublished CVE record published
2026-06-17 04:40 UTCUpdated Record last modified

eginnovations eg agent UPGRADE

Affected: <= 7.1.11

Fixed in: newer than 7.1.11

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy eg-agent || rpm -q eg-agent || eg-agent --version

2. UPGRADE to newer than 7.1.11 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade eg-agent

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade eg-agent

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

eginnovations eg manager UPGRADE

Affected: <= 7.1.8

Fixed in: newer than 7.1.8

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy eg-manager || rpm -q eg-manager || eg-manager --version

2. UPGRADE to newer than 7.1.8 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade eg-manager

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade eg-manager

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

eginnovations eg rum collectors UPGRADE

Affected: >= 7.1.0 and < 7.2

Fixed in: 7.2

Safe to downgrade to: a release before 7.1.0

1. Check installed version

apt-cache policy eg-rum-collectors || rpm -q eg-rum-collectors || eg-rum-collectors --version

2. UPGRADE to 7.2 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade eg-rum-collectors

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade eg-rum-collectors

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 7.1.0 (Debian / Ubuntu)

apt-cache madison eg-rum-collectors sudo apt install eg-rum-collectors=<VERSION_BEFORE_7.1.0> sudo apt-mark hold eg-rum-collectors

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list eg-rum-collectors sudo dnf downgrade eg-rum-collectors-<VERSION_BEFORE_7.1.0> sudo dnf versionlock add eg-rum-collectors

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

eginnovations vm agent UPGRADE

Affected: <= 7.1.8

Fixed in: newer than 7.1.8

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy vm-agent || rpm -q vm-agent || vm-agent --version

2. UPGRADE to newer than 7.1.8 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade vm-agent

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade vm-agent

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2022-29594?

eg agent: upgrade to newer than 7.1.11; eg manager: upgrade to newer than 7.1.8; eg rum collectors: upgrade to 7.2. Exact commands for each OS are on this page.

Is CVE-2022-29594 being exploited?

CVE-2022-29594 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2022-29594 affect?

CVE-2022-29594 affects eg agent, eg manager, eg rum collectors. Severity is high (CVSS 7.8). eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.

How urgent is CVE-2022-29594?

Priority 38/100. High severity; Public exploit reference

References

← Back to latest CVEs