PluginScript Vulnerability Affecting System Root Access in Plugin Software

CVE-2026-44933

What is CVE-2026-44933?

A vulnerability exists in PluginScript that allows an attacker to exploit the 'chroot' functionality. In standard configurations, the chroot target may erroneously point to the system root, effectively making the chroot operation a no-op. This misconfiguration can lead to unauthorized access to host binaries, potentially allowing attackers to execute commands with root privileges, posing significant security risks to the underlying system.

References