OPCFoundation OPC UA LocalDiscoveryServer (LDS)
OPC UA LocalDiscoveryServer (LDS) vulnerability allows arbitrary command execution during installation.
A vulnerability (CVE-2026-77477) in OPCFoundation's OPC UA LocalDiscoveryServer (LDS) installers, specifically versions prior to 1.04.420, allows attackers to execute arbitrary commands with high privileges during installation. Exploitation requires local access to the installer and the ability to interact with the console during the installation process. OPCFoundation recommends updating to version 1.04.420 or later.
AI summary of the linked source. Not reviewed by an editor. How this works
Run OPCFoundation?
Get an email when a new story names OPCFoundation, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA vulnerability in OPC Foundation's OPC UA LocalDiscoveryServer (LDS) installers prior to version 1.04.420 allows attackers with local access to execute arbitrary commands with elevated privileges during the installation process. The root cause lies in insufficient input validation and insecure handling of console interactions within the installer itself — a class of vulnerability often overlooked during software supply chain reviews. This is particularly significant in industrial and operational technology (OT) environments where OPC UA is widely deployed, as privilege escalation can lead to full system compromise. Organizations that delay patching installer components or fail to track third-party software versions are especially exposed. Prompt upgrades to version 1.04.420 or later are essential to close this attack vector.
What helps against this
How we list vendors- Automated patch management
Known holes get closed in days, not months.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-77477