Skip to content
Sign in
7.3 High

CVE-2026-100310 GNU libextractor before 1.16 loads plugins from an untrusted search path specified by the LIBEXTRACTOR_PREFIX…

Description

GNU libextractor before 1.16 loads plugins from an untrusted search path specified by the LIBEXTRACTOR_PREFIX environment variable without proper privilege checks. A local attacker can exploit this by setting LIBEXTRACTOR_PREFIX to a directory containing a malicious plugin that executes arbitrary code with elevated privileges when loaded by a setuid or setgid program.

Affected products and versions

Product Affected versions Fixed in
libextractor 1.16 earliest → < 1.16 1.16

Other CVEs of libextractor

The 2 CVEs of libextractor →
CVE-2026-91752 GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function… 8.7 High
Track this CVE