Yüksek CVSS 7 PoC var

CVE-2026-4878: Libcap: güvenlik açığı

Yayın: 9 Nisan 2026 19:16 · Güncelleme: 6 Kasım 2026 10:18

Açıklama (NVD)

A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.

Özet bilgiler

Ürün: Libcap Project Libcap
CVSS v3.1: 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: %0,21 (yüzdelik 11)
CWE: CWE-367
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
libcap-project-libcap	—	—	—
redhat-openshift-container-platform	4.0	4.0	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—
redhat-enterprise-linux	10.0	10.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları