GLPI Agent 1.7.2 has been released!
You can download it on the GLPI Agent github project: https://github.com/glpi-project/glpi-agent/releases/tag/1.7.2
This version specifically fixes 2 critical security issues related to MSI packaging on windows:
- CVE-2024-28240: A local user could modify the GLPI Agent configuration to gain higher privileges.
- CVE-2024-28241: A local user could modify the GLPI-Agent installation to gain higher privileges, but only when GLPI Agent is not installed in the default installation folder.
These security issues impact all Windows installation performed with MSI packaging.
We encourage you to upgrade all these agents as soon as possible!
Anyway you don’t need to upgrade to 1.7.2 after updating to 1.7.1 if your GLPI Agent was not installed on windows with the MSI package.