CISA ICS advisory ICSA-26-286-01 (released Oct 13) covers Inductive Automation Ignition. The Perspective module does not properly validate session privileges for Designer-level access: an authenticated Vision user can present a valid Vision session identifier and obtain Designer privileges, then execute arbitrary code in the Ignition Gateway process (CWE-863). Affected: Ignition 8.1.0–8.1.54 and 8.3.0–8.3.8. Fixed: 8.1.55 (Sep 2026) and 8.3.9 (Aug 2025). CVSS 3.1 8.8 (AV:N/AC:L/PR:L/UI:N). Reported to the vendor by Tim Hemingway. Pair with network isolation of Gateway/Designer interfaces and least-privilege Vision project accounts.