Lucene search
+L

38 matches found

OSV
OSV
•added 2026/08/19 11:56 a.m.•13 views

PYSEC-2026-3682 linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)

Summary Every Linuxfabrik check plugin that supports the shared --test argument routed through lib.lftest.test will, when --test is supplied, treat the first CSV element as a filesystem path and read its full contents as the plugin's simulated STDOUT — running as root when the plugin is invoked...

5.5CVSS5.6AI score0.00168EPSS
SaveExploits0References7
Rows per page
Query Builder