571 matches found
CVE-2026-41651
🚨 CVE-2026-41651 — Pack2TheRoot Privilege Escalation Vulnerability in PackageKit TOCTOU Race Condition 📌 Overview CVE-2026-41651 is a local privilege escalation vulnerability affecting the PackageKit system service used in various Linux distributions. The vulnerability is caused by a Time-of-Chec...
CVE-2026-41651
CVE-2026-41651 — PackageKit TOCTOU Local Privilege Escalation Classification: Purple Team Assessment Artifact Authorized use only. This document and the accompanying test script are intended solely for internal security validation on systems where written authorization has been obtained. Proof of...
CVE-2026-41651-analysis
CVE-2026-41651 — Pack2TheRoot Analysis PackageKit Local Privilege Escalation TOCTOU Race Condition CVSS v3.1: 8.8 HIGH | CWE-367 | Published: 2026-04-22 📌 Overview This repository compiles a personal analysis report and research material on the PackageKit local privilege escalation vulnerability...
POC
POC For research purposes only! A public collection of POCs & Exploits for the vulnerabilities I discovered. CVE-2022-22583 PackageKit : An application may be able to access restricted files SIP Bypass CVE-2022-26690 PackageKit : A malicious application may be able to modify protected parts of th...
cve-2026-28912
CVE-2026-28912 — Reverse engineering notes and reproduction Independent reverse engineering of the macOS PackageKit symlink-following bug CVE-2026-28912, plus a working PoC that demonstrates the installer writing an attacker-controlled file as root through a directory symlink in the install...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit
CVE-2026-41651 — Pack2TheRoot: PackageKit D-Bus TOCTOU LPE |...
CVE-2026-41651
Pack2TheRoot — CVE-2026-41651 TOCTOU race in PackageKit's transaction handler. Any local unprivileged user can install arbitrary packages as root with no authentication. Overview Field| Value ---|--- CVE| CVE-2026-41651 Component| PackageKit daemon packagekitd Affected versions| 1.0.2 – 1.3.4 Fix...
CVE-2026-104619
Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...
UBUNTU-CVE-2026-104619
Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...
CVE-2026-41651-Python
Pack2TheRoot: CVE-2026-41651 Python Python PoC of the PackageKit TOCTOU Local Privilege Escalation exploit. Any local unprivileged user can install arbitrary packages as root with no authentication. Field| Value ---|--- CVE| CVE-2026-41651 Component| PackageKit daemon packagekitd Affected version...
CVE-2026-41651
CVE-2026-41651 CVSS 3.x : 7.8 HIGH CWE : CWE-367 Time-of-Check Time-of-Use Fix : PackageKit 1.3.5+ Affects : PackageKit 1.0.2 – 1.3.4 Local privilege escalation via TOCTOU race condition in PackageKit's D-Bus transaction handler. Any unprivileged local user can install arbitrary packages as root ...
pack2theroot-lab
Pack2TheRoot Lab — CVE-2026-41651 A Dockerised, CTF-style local-privilege-escalation lab built around the Pack2TheRoot advisory CVE-2026-41651, a 12-year-old flaw in the PackageKit daemon disclosed by Deutsche Telekom's Red Team on 22 April 2026. The lab includes three containers : a...
CVE-2026-104620
A flaw was found in PackageKit. A path traversal vulnerability during action simulation in the Zypp backend allows a local attacker to manipulate file paths. This issue can be exploited by an unprivileged local user to achieve privilege escalation and gain root access to the system. Mitigation...
CVE-2026-104619
A flaw was found in PackageKit. This vulnerability allows a local, unprivileged user to achieve privilege escalation by rolling back installed security updates through the Zypp backend. By downgrading system packages to earlier vulnerable versions, an attacker can reintroduce and exploit previous...
CVE-2026-104619
Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...
CVE-2026-104619
The PackageKit Zypp Backend is vulnerable to a rollback security update issue in versions before 1.4.1 . This vulnerability allows untrusted users to roll back security updates, potentially leading to privilege escalation . Remediation is available via the SUSE-SU-2026:5143-1 update. Users can ap...
EUVD-2026-120864
Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...
CVE-2026-104619 PackageKit ZYpp rollback vulnerability
Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...
