VULNERABILITY INTELLIGENCE
CVE-2026-75037
CVSS score7 HIGH
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-08-25
Last modified2026-09-28
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566.
Weakness classification
- meissner@suse.de: CWE-290