CVE-2024-48990

CVE-2024-48990 Exploit Local Privilege Escalation in needrestart 3.8 via PYTHONPATH injection. How It Works 1. needrestart runs as root and scans all processes 2. Finds our Python process, reads PYTHONPATH=/tmp/.m from /proc/pid/environ 3. Executes Python as root with our malicious PYTHONPATH 4...