Local Privilege Escalation Vulnerability in IDC SFX2100 on Linux

CVE-2026-29123

What is CVE-2026-29123?

A local privilege escalation vulnerability exists in the SUID root-owned binary located at /home/xd/terminal/XDTerminal on the IDC SFX2100 running Linux. This flaw could allow a local attacker to escalate their privileges based on specific system conditions through various exploitation techniques including PATH hijacking, symlink abuse, or shared object hijacking. These methods could potentially grant unauthorized access to sensitive system functionalities, compromising the overall security of the affected environment.

References