CVE-2026-104618

The sdbootutil script creates a debug log at /var/log/sdbootutil.log with world-readable permissions. This misconfiguration allows arbitrary low-privileged users on the system to access and extract sensitive secrets from the log file. No specific remediation or exploit details are provided in the...