> Source: [sk185153](https://support.checkpoint.com/results/sk/sk185153)

# sk185153 - CVE-2026-62145 - Local privilege escalation in Gaia Portal

| Property | Value |
|----------|-------|
| Solution ID | sk185153 |
| Date Created | 2026-07-14 |
| Last Modified | 2026-07-26 |
| Technical Level | General |
| Products | Security Gateway, Security Management Server |
| Versions | R82.10, R82, R81.20, R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * A vulnerability in Gaia Portal allows an authenticated attacker with read-only access to run commands as root.  

* Affected Products and Versions:  
  * Versions: R77.30, R80, R80.10, R80.20, R80.30, R81 R81.10, R81.20, R82, R82.10
  * Products: Security Gateway, Security Management  
    Note: Check Point Spark Gateways are not affected
* This issue received the ID [CVE-2026-62145](https://www.cve.org/CVERecord?id=CVE-2026-62145).

*

  ### Mitigation

  1. Follow [Check Point Gateway and Management Hardening Best Practices Guide](https://sc1.checkpoint.com/documents/Check_Point_Gateway_and_Management_Hardening/CP_Check_Point_Gateway_and_Management_Hardening.pdf) recommendation to restrict the IP address of Gaia OS admin access to only allowed and trusted hosts/subnets.   
     Additionally, enable MFA (Multi-Factor Authentication) for administrators.  

  2. In **Gaia Portal** \> **System Management** \> **Host Access** \> add only trusted hosts/subnets in **Allowed Hosts
     ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1784020678334/portal202607141236291.png)**   

     For more info about Host Access, refer to the [Gaia Administration Guide](https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_Gaia_AdminGuide/Content/Topics-GAG/Host-Access.htm).   
  3. In **Gaia Portal** \> **User Management** \> **Authentication** \> click on **Enable Two-Factor Authentication
     ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1784021992040/2FA202607141250061.png)**   
     For more information on setting up 2FA for Gaia users: [Authentication](https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_Gaia_AdminGuide/Content/Topics-GAG/Authentication.htm)

  <br />

  <br />

## Solution

This problem was fixed. The fix is included in:

* [Jumbo Hotfix Accumulator for R82.10](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.10/Default.htm) starting from Take 36
* [Jumbo Hotfix Accumulator for R82](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm) starting from Take 118
* [Jumbo Hotfix Accumulator for R81.20](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm) starting from Take 158

<br />

To ensure the correct flow of security logs from the Security Gateways to the Security Management and Log Servers, install this Jumbo Hotfix Accumulator on all Management and Log Servers.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content