---
title: Tip: Ignition OT estates — upgrade past CVE-2026-92817 and treat Vision sessions as Designer-capable until patched | ctxsec
url: https://ctxsec.com/items/tip-ignition-upgrade-designer-session
description: ""
status: "tip"
published: 2026-10-16
---

> 

[← Tips & Guides](/tips) · [markdown](/items/tip-ignition-upgrade-designer-session.md)

tip

2026-10-16

### Tip: Ignition OT estates — upgrade past CVE-2026-92817 and treat Vision sessions as Designer-capable until patched

If you run Ignition Gateway with Vision + Perspective: (1) inventory versions — anything on 8.1.x below 8.1.55 or 8.3.x below 8.3.9 is in scope for CVE-2026-92817; (2) upgrade to 8.1.55+ or 8.3.9+ before exposing Designer/Gateway management beyond the OT zone; (3) until patched, assume any authenticated Vision operator can escalate to Designer and run code as the Gateway process — shrink Vision project membership, require MFA where supported, and keep Gateway admin interfaces off the public internet; (4) review Designer/audit logs for unexpected project edits or script changes after Oct 13 disclosure.

Sources: [CISA ICSA-26-286-01](https://www.cisa.gov/news-events/ics-advisories/icsa-26-286-01)