CVE-2026-123962

In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories...