PT-2026-53272 · Acl · Acl

Andreas Gruenbacher + 1 · Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-54369

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions acl versions prior to 2.4.0

Description A symlink traversal issue exists in pathname-based functions. Local attackers can escalate privileges by replacing a pathname component with a symbolic link. If an attacker controls any part of a pathname processed by a privileged caller, they can redirect ACL read or write operations to arbitrary files or directories, allowing unauthorized manipulation of access control lists. The affected functions are acl get file(), acl set file(), acl extended file(), and acl delete def file().

Recommendations Update to version 2.4.0 or later. As a temporary mitigation, restrict access to the functions acl get file(), acl set file(), acl extended file(), and acl delete def file() to prevent unauthorized pathname manipulation.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-54369

Affected Products

Acl

References · 5

• https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-54369 · Security Note
• https://twitter.com/VulmonFeeds/status/2071620507393224885 · Twitter Post
• https://vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions · Note
• https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5 · Note