NI-PAL Security Update for NOFFZ Test Systems
Current Information on the
Security Vulnerability
National Instruments has published information about a security vulnerability in the NI-PAL kernel driver. Because NI-PAL is included with many NI driver installations, the component may also be installed on test systems supplied by NOFFZ.
Windows systems running NI-PAL version 26.3.1 or earlier are affected. NI recommends updating these systems to NI-PAL 2026 Q3 or later. According to NI, there were no known exploits for the vulnerability at the time of the announcement.
What vulnerability has been identified?
The vulnerability affects the NI-PAL kernel driver. It may allow a local, authenticated user to escalate privileges and execute arbitrary code.
NI-PAL is an infrastructure component used by many NI drivers. The vulnerability may therefore affect different NI software and hardware configurations, including components used in customized NOFFZ test systems.
Why can the update affect system availability?
In addition to the security risk, the vulnerability may affect the operation and availability of a test system.
Microsoft Windows uses a blocklist for drivers classified as vulnerable. According to NI, Windows may begin blocking affected NI-PAL components as early as November 10, 2026, when this protection mechanism is enabled. In this situation, NI MAX, NI Hardware Manager, device drivers, or dependent hardware workflows may display errors or stop working correctly.
NOFFZ therefore recommends checking the installed NI-PAL version in advance and planning any required update in a controlled manner.
Which systems are affected?
Systems should be reviewed if they:
- use Microsoft Windows,
- have NI software or NI hardware installed, and
- contain NI-PAL version 26.3.1 or earlier.
According to NI, the Microsoft vulnerable driver blocklist is enabled by default on Windows 11. It is not enabled by default on Windows 10, although the setting may have been changed by the user or the responsible IT organization.
NI also states that Linux systems containing an affected NI-PAL version have the underlying security vulnerability. However, the Windows-specific driver blocking mechanism does not apply to them.
How to check the installed NI-PAL version
- Open
%WinDir%\System32\drivers - Locate the
nipalk.sysfile. - Open the file properties and select the Details tab.
- Review the Product Version entry.
If version 26.3.1 or earlier is installed, NI recommends updating to NI-PAL 2026 Q3 or later.
Recommended update
NI provides NI-PAL 2026 Q3 as an updated version. The update can be installed through NI Update Service or by using the offline installer available on the NI-PAL download page.
When using NI Update Service, it may first be necessary to update NI Package Manager before the NI-PAL update becomes available. The system must be restarted after the installation.
Additional information:
- NI Security Advisory: Local Privilege Escalation in NI-PAL
- Required NI-PAL Security Update
- Download NI-PAL 2026 Q3
The NI-PAL download page describes NI-PAL as a required infrastructure component of many NI driver products. The separate download is intended to update NI-PAL without upgrading the associated NI driver version.
Recommendation for production-critical test systems
For production-critical or validated systems, NOFFZ recommends a controlled update process:
- check the installed NI-PAL version,
- schedule a suitable maintenance window if version 26.3.1 or earlier is installed,
- document the current system configuration and relevant settings,
- install NI-PAL 2026 Q3 or later,
- restart the system,
- perform a functional verification of the test system.
NOFFZ is also testing the update on representative systems to collect practical information about installation and compatibility in typical test system configurations. This approach is included in the current internal customer communication regarding NI-PAL.
Functional verification after the update
After restarting the system, NI recommends the following checks:
- Confirm that the devices are available in NI Measurement & Automation Explorer, or NI MAX, or in NI Hardware Manager.
- Run Device Self-Test for the installed devices.
- Run Device Reset.
- Run a Test Panel, example program, or test application that uses the installed hardware.
- For production-critical systems, verify the complete intended test sequence.
These checks are intended to confirm that the NI hardware and dependent applications continue to operate correctly after the update.
No general Windows or driver upgrade required
The recommended action specifically concerns the NI-PAL component.
According to NI:
- migration to a newer Windows version is not required,
- a general upgrade of all installed NI drivers is not required, and
- the targeted NI-PAL update is backward compatible with previous NI-PAL versions to at least NI-PAL 17.0.
Existing validated Windows installations therefore do not need to be migrated to a different Windows version solely because of this NI-PAL update.
NI does not recommend disabling the Microsoft vulnerable driver blocklist as a general workaround because doing so can reduce Windows protection against known vulnerable kernel drivers.
Support from NOFFZ
If you require assistance with the assessment of a test system supplied by NOFFZ, please provide the following information where possible:
- test system designation or serial number,
- installed Windows version,
- installed NI-PAL version,
- NI hardware and NI driver versions in use,
- description of the production- or validation-relevant test application.
Based on this information, NOFFZ can review the system-specific situation and coordinate the appropriate next steps with you.
We’re Here to Help!
Service Team
Information current as of October 5, 2026
This page summarizes the information available on the stated date. The latest security advisories and download information published by National Instruments remain authoritative.