Local Privilege Escalation Vulnerability in Qualys Cloud Agent for MacOS and Linux

CVE-2025-43079

What is CVE-2025-43079?

The Qualys Cloud Agent for MacOS and Linux contains a vulnerability within its bundled uninstall script (qagent_uninstall.sh). This script executes multiple system commands without using absolute paths or sanitizing the $PATH environment variable. If executed with elevated privileges, such as through sudo, a manipulated $PATH could potentially allow an attacker to run malicious executables instead of legitimate system binaries. This vulnerability poses a significant risk as it can be exploited for local privilege escalation and arbitrary command execution, jeopardizing system integrity and security.

References