ASUS Issues Patch for Critical Control Center Flaw That Could Grant Nearby Attackers Root Privileges

ASUS has rolled out a security update for its Control Center Express Agent after a high‑severity vulnerability, identified as CVE‑2026‑19397, was found to allow unauthenticated attackers in close proximity to obtain full system control. The flaw, classified as critical, stems from a missing authentication step that could be bypassed to execute code with root-level permissions on affected machines.

The vulnerability exploits the way the Control Center Express Agent communicates with local hardware components. Because the service does not verify the identity of callers, a malicious actor who can reach the host over the same network—such as via Wi‑Fi or Bluetooth—can send crafted commands that the agent processes as if they originated from a trusted source. Successful exploitation grants the attacker the same privileges as the system’s administrator, opening the door to data theft, ransomware deployment, or further network compromise.

Control Center Express Agent is a pre‑installed utility on many ASUS laptops and desktops, designed to streamline power‑management, performance tuning, and firmware updates. While the feature is convenient for end users, its deep integration with the operating system makes any security weakness especially dangerous. Similar lapses in authentication have surfaced in other vendor‑supplied utilities in recent years, underscoring a broader trend where convenience features inadvertently expand the attack surface.

ASUS responded to the discovery, originally reported by the security research group GBHackers, by publishing a patch that restores proper credential checks and hardens the communication pathway. The update is being distributed through Windows Update, ASUS Live Update, and the company’s support portal. Security analysts recommend that users apply the patch immediately and, where possible, disable the Control Center service if its functionality is not required for daily operations.

The episode highlights the ongoing challenge of balancing feature richness with robust security design, particularly in consumer‑grade hardware that often lands in corporate environments. As manufacturers continue to embed more management tools directly into devices, experts warn that rigorous authentication and regular code audits will be essential to prevent similar exploits. ASUS has pledged to monitor the situation and release further guidance if additional vulnerabilities are uncovered, while the broader industry watches to see how quickly other vendors address comparable risks.