VULNERABILITY INTELLIGENCE
CVE-2026-25704
EPSS probability0.08%
CISA KEVNot currently listed
Published2026-03-30
Last modified2026-06-17
Description
A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic. This issue affects cosmic-greeter before https://github.Com/pop-os/cosmic-greeter/pull/426.
Weakness classification
- meissner@suse.de: CWE-271