CVE-2026-53759

In linuxfabrik-lib versions before 4.2.0, db_sqlite.py created SQLite databases at predictable /tmp paths and followed attacker-created symlinks. A compromised local account (e.g., nagios) could create a symlink and trigger a sudo-authorized plugin, causing a root process to write to arbitrary pa...