CVE-2026-4878

CVE-2026-4878 is a libcap TOCTOU race condition in cap_set_file() that could let a local attacker with write access to a parent directory inject or strip capabilities from executables, enabling privilege escalation. The connected advisories cite a fix in libcap (openSUSE openSUSE-SU-2026:20613-1;...