VULNERABILITY INTELLIGENCE

CVE-2026-54369

CVSS score7.1 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-06-29
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.

Weakness classification

  • disclosure@vulncheck.com: CWE-59
  • 0b0ca135-0b70-47e7-9f44-1890c2a1c46c: CWE-59

Primary references