CVE-2026-82457

su-exec through version 0.3 contains a type-truncation vulnerability in its handling of numeric user and group identifiers. Values parsed via strtol are not validated before being assigned to uid_t and gid_t , so out-of-range identifiers truncate to zero—root 's ID. A local attacker with low priv...

CVE-2026-82457 su-exec through 0.3 Privilege Escalation via Numeric User ID

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uidt and gidt, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target...