Symlink Vulnerability in linuxfabrik-lib Affects Database Access and Caching

CVE-2026-53759

What is CVE-2026-53759?

A vulnerability exists in the linuxfabrik-lib package, which provides essential Python modules for various functionalities including database access and API integrations. Before version 4.2.0, the library's db_sqlite.py script created SQLite databases in accessible directories within /tmp, allowing attackers to exploit symbolic links. A malicious actor controlling a local monitoring account can create a symlink pointing to a database file such as /tmp/linuxfabrik-monitoring-plugins-docker-stats.db. By executing a sudo-authorized plugin, the attacker can manipulate the SQLite database or overwrite critical files due to the root process's permissions. This vulnerability highlights the risks associated with improperly secured temporary directories and the importance of upgrading to version 4.2.0 or later to mitigate these risks.

References