CVE-2026-72694

CVE-2026-72694 describes a local privilege escalation in MRTG. When MRTG runs as root and then drops privileges, a low-privileged attacker can exploit a symlink-following vulnerability in the PID file path to trick the root process into changing ownership of an arbitrary existing file to the daem...