CVE-2026-57203

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, astloggrabber executes a Python script from the world-writable /tmp directory. An attacker already authorized to open a she...

CVE-2026-57203 Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, astloggrabber executes a Python script from the world-writable /tmp directory. An attacker already authorized to open a she...

EUVD-2026-111402

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, astloggrabber executes a Python script from the world-writable /tmp directory. An attacker already authorized to open a she...

CVE-2026-57203

The Asterisk telephony toolkit is vulnerable to local privilege escalation due to a CWE-426 untrusted search path issue. In versions prior to 20.20.1, 21.12.3, 22.10.1, 23.4.1 , and Certified Asterisk 20.7-cert11, 22.8-cert3 , the ast_loggrabber component executes a Python script from the world-w...