CVE-2023-1521

The sccache client on Linux is vulnerable to arbitrary code execution because it allows preloading malicious code via the LD_PRELOAD environment variable. If the sccache server is running with root privileges—which is the default configuration for the snap package —an attacker can achieve root pr...