Local Privilege Escalation Vulnerability in ABRT by Red Hat
CVE-2026-110331
7.8HIGH
What is CVE-2026-110331?
A security vulnerability in ABRT allows local attackers to exploit a flaw in the completeness check designed to mitigate previous vulnerabilities. An unprivileged user can create a 'count' element in the dump directory, which enables them to bypass security checks and potentially poison critical elements within those directories. This could lead to the attacker seizing ownership or manipulating the directory while privileged handlers are operational, posing a serious threat to system integrity.
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Vivek Parikh (BreachX Zero Day Labs) for reporting this issue.