Skip to content
fr Sign in
8.4 High

CVE-2026-54369 acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions…

Description

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.

Affected products and versions

Product Affected versions Fixed in
acl 2.4 earliest → < 2.4.0 2.4.0
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat Hardened Images 2.4 earliest → < 2.4.0-0.1.hum1 2.4.0-0.1.hum1
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat Update Infrastructure 5 1787241260 earliest → < 1787241260 1787241260
Show the 7 other branches
Product Affected versions Fixed in
Red Hat Discovery 2 1784821750 earliest → < 1784821750 1784821750
Red Hat OpenShift distributed tracing 3.10.1 1785704636 earliest → < 1785704636 1785704636
Red Hat OpenShift distributed tracing 3.10.2 1785704636 earliest → < 1785704636 1785704636
Red Hat Insights proxy 1.5 1786433656 earliest → < 1786433656 1786433656
Red Hat OpenShift distributed tracing 3.10.0 1785704636 earliest → < 1785704636 1785704636
Red Hat OpenShift Container Platform 4.22 4.22 earliest → < 4.22.9.8.202608130832-0 4.22.9.8.202608130832-0
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of acl

The 3 CVEs of acl →
CVE-2026-54371 attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that… 8.4 High CVE-2026-54370 acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that allows local… 7.2 High
Track this CVE