CVE-2021-47756

Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the valet command with root privileges. Attackers can edit the symlinked valet command to execute arbitrary code with root permissions without additional authentication...

CVE-2021-47756: Incorrect Permission Assignment for Critical Resource

Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the valet command with root privileges. Attackers can edit the symlinked valet command to execute arbitrary code with root permissions without additional authentication...

CVE-2021-47756

TL;DR: CVE-2021-47756 affects Laravel Valet 1.1.4–2.0.3. A local attacker can modify the symlinked valet command to execute arbitrary code with root privileges, bypassing authentication. This is a local-privilege-escalation via manipulation of the valet binary path. Affected software: Laravel Val...