Security Flaw in Planet9 Due to Misconfigured File Permissions

CVE-2026-50602

What is CVE-2026-50602?

A security vulnerability in Planet9 has been identified due to improperly configured file permissions on an application executable associated with the Planet9 background service. This service operates with SYSTEM-level privileges, while the affected executable allows excessive access to non-administrative users. Consequently, authenticated local users may exploit this misconfiguration to alter or replace the executable, potentially executing arbitrary code with SYSTEM privileges when the service initiates or the system reboots.

References