Local Command Execution Weakness in Open Source Snort 3

CVE-2026-76524

What is CVE-2026-76524?

A security flaw in the control channel socket of Open Source Snort 3 permits local attackers with limited privileges to execute arbitrary commands. This vulnerability arises from inadequate authentication checks during local user connections to the Snort control channel socket. An attacker could exploit this weakness by accessing the Snort 3 control channel as a local user, which could lead to executing arbitrary commands and manipulating the Snort 3 process memory.

References