Privilege Escalation Vulnerability in su-exec by Alpine Linux

CVE-2026-82457

What is CVE-2026-82457?

A vulnerability in su-exec versions up to 0.3 allows attackers to exploit improper data validation methods related to user and group identifiers. The issue arises when large numeric identifiers, processed by the strtol function without proper checks, are assigned to uid_t and gid_t variables. This results in out-of-range values being truncated to zero, incorrectly granting root privileges. Attackers may leverage this flaw to execute targeted programs with elevated privileges, bypassing security measures intended for unprivileged accounts.

References