PT-2026-53805 · Linuxcnc · Linuxcnc

Published 2026-06-30 · Updated 2026-06-30 · CVE-2026-58302

NVD

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

rtapi app in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is installed SUID root and loads shared library modules via dlopen() by using a user-supplied module name. Insufficient validation of the module name allows path traversal, enabling an unprivileged local user to load an arbitrary shared library. Because the process retains elevated privileges during module loading, this results in local privilege escalation to root.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-58302

Affected Products

Linuxcnc

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-58302 · Security Note
• https://github.com/LinuxCNC/linuxcnc/compare/v2.9.8...v2.9.9 · Note
• https://github.com/LinuxCNC/linuxcnc/commit/00d534c87464a3ed446656998aa02b8abc74b391 · Note
• https://github.com/LinuxCNC/linuxcnc/commit/ea7cd579d39b586952a42e3da9a26d3e36e7a272 · Note
• https://bugs.debian.org/1140943 · Note