CVE-2023-1521

On Linux systems, the sccache client is vulnerable to arbitrary code execution because it can be tricked into preloading a malicious shared library via the LD_PRELOAD environment variable. If the sccache server is running with root privileges—which is the default configuration when installed via ...