Lucene search
+L

3 matches found

OSV
OSV
added 2026/06/23 7:25 p.m.6 views

CVE-2026-54328 Pi: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts

Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with temporary npm or git extension package installs used predictable paths under the operating system temporary directory. On Linux-based multi-user systems, a local attacker who can write to the shared temporary...

7.3CVSS6AI score0.00115EPSS
SaveExploits0References7
Rows per page
Query Builder