Sccache · Sccache · CVE-2023-1521
**Name of the Vulnerable Software and Affected Versions**
sccache versions prior to 0.4.0
**Description**
The sccache client can execute arbitrary code with the privileges of a local sccache server by preloading the code in a shared library passed to `LD PRELOAD`. If the server is run as root, which is the default when installing the snap package, this means a user running the sccache client can get root privileges.
**Recommendations**
Upgrade to version 0.4.0
As a temporary workaround, do not run the sccache server as root.