ABB Ability Edgenius Hit by CVE‑2026‑31431: Linux Kernel Privilege Escalation

ABB’s Ability Edgenius industrial gateway is now exposed to a critical Linux kernel vulnerability, CVE‑2026‑31431, also known as the “Copy Fail” flaw. The issue can elevate a locally authenticated user—or a compromised container workload—to root, granting full system control.

Vulnerability Overview

The flaw lies in the Linux kernel’s cryptographic subsystem and has been present in kernels released since 2017. Successful exploitation requires local code execution, but in shared or containerized environments the risk escalates dramatically.

Affected Products

• ABB Ability Edgenius versions 3.2.0.0 through 3.2.4.0 (inclusive)
• All devices running these releases on the ABB Ability Edgenius Gateway – bE100

Risk Assessment

• CVSS score: 7.8 (High)
• Root access enables full system compromise, data exfiltration, and potential sabotage of critical infrastructure.
• Industries impacted: critical manufacturing, energy, water & wastewater, chemical.
• Global deployment – the vulnerability is relevant to installations worldwide.

Mitigation & Fix

• Patch now: Upgrade to Ability Edgenius 3.2.4.1, the first release containing the fix.
• Operational hardening: Restrict SSH and cockpit access to trusted users only; by default no lower‑privilege accounts exist on Edgenius installations.
• Follow ABB PSIRT guidance for additional security hardening and monitoring.

ABB recommends applying the update at the earliest convenience to eliminate the root‑privilege escalation risk.

Impact on Critical Infrastructure

Given the platform’s use in manufacturing, energy, water, and chemical sectors, a successful exploit could lead to significant operational disruption or safety hazards. Immediate remediation is essential for all operators.