VULNERABILITY INTELLIGENCE

CVE-2024-48992

CVSS score7.8 HIGH

EPSS probability0.34%

CISA KEVNot currently listed

Published2024-11-19

Last modified2026-06-17

Description

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable.