FalconFlank Exposed: Zero-Day Privilege Escalation in CrowdStrike Sensor

Check Point Research published technical details on "FalconFlank" (CVE-2026-85012), a local privilege escalation flaw in CrowdStrike Falcon sensors on Windows and Linux. The vulnerability allows local unprivileged attackers or malicious scripts executed by coding agents to hijack security sensor communication pipes and obtain SYSTEM-level access, bypassing standard EDR detection.