WS-2023-0091

A privilege escalation vulnerability was found in polkit. Polkit stores rules in /etc/polkit-1/rules.d. We follow the upstream provided permissions for this folder, so polkitd owns it and permissions are set to 700. Since the user owns the directory it's easy to escalate from user polkitd to root...