8.4
CVE-2026-54369
- EPSS 0.15%
- Veröffentlicht 29.06.2026 12:37:21
- Zuletzt bearbeitet 19.08.2026 12:18:32
- CVE-Watchlists
- Unerledigt
acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions
acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
HerstellerRed Hat
≫
Produkt
Red Hat Enterprise Linux 10
Default Statusaffected
Version
0:2.4.0-1.el10_2
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat Enterprise Linux 8
Default Statusaffected
Version
0:2.4.0-1.el8_10
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat Enterprise Linux 9
Default Statusaffected
Version
0:2.4.0-1.el9_8
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat OpenShift Container Platform 4.22
Default Statusaffected
Version
4.22.9.8.202608130832-0
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat Discovery 2
Default Statusaffected
Version
1784821670
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat Discovery 2
Default Statusaffected
Version
1784821750
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat Hardened Images
Default Statusaffected
Version
2.4.0-0.1.hum1
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat Insights proxy 1.5
Default Statusaffected
Version
1786433656
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat OpenShift distributed tracing 3.10.0
Default Statusaffected
Version
1785704636
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat Update Infrastructure 5
Default Statusaffected
Version
1784794818
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat Update Infrastructure 5
Default Statusaffected
Version
1784794778
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat Update Infrastructure 5
Default Statusaffected
Version
1784795112
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat Update Infrastructure 5
Default Statusaffected
Version
1784794289
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat Update Infrastructure 5
Default Statusaffected
Version
1784795076
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat Enterprise Linux 6
Default Statusaffected
HerstellerRed Hat
≫
Produkt
Red Hat Enterprise Linux 7
Default Statusaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.049 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| disclosure@vulncheck.com | 8.4 | 0 | 0 |
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| disclosure@vulncheck.com | 7.1 | 1.8 | 5.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
|
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | 7.1 | 1.8 | 5.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
|
CWE-59 Improper Link Resolution Before File Access ('Link Following')
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1
https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5
https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions
https://bugzilla.redhat.com/show_bug.cgi?id=2490277
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json
https://access.redhat.com/errata/RHSA-2026:34351
https://access.redhat.com/security/cve/CVE-2026-54369
https://access.redhat.com/errata/RHSA-2026:42736
https://access.redhat.com/errata/RHSA-2026:42739
https://access.redhat.com/errata/RHSA-2026:43420
https://access.redhat.com/errata/RHSA-2026:44481
https://access.redhat.com/errata/RHSA-2026:46836
https://access.redhat.com/errata/RHSA-2026:50205
https://access.redhat.com/errata/RHSA-2026:53371
https://access.redhat.com/errata/RHSA-2026:54769