Critical Security Update
To help protect your systems, customers using NI driver software 2026 Q2 or earlier should visit ni.com/ni-pal-update and follow the recommended actions.
A security vulnerability has been discovered and reported by Flexera in their FlexNet Publisher libraries. Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher (aka FlexNet License Server Manager) allows remote attackers to execute arbitrary code via a crafted 0x2f packet. Versions of NI License Manager prior to 4.0 distributed vulnerable versions of the FlexNet Publisher libraries but it no longer distributes the library in versions of the NI License Manager client 4.0 and later.
Complete the following steps to install the patch: