CVE-2026-75038mediumCWE-61

CVE-2026-75038: medium-severity vulnerability in ilya-zlobintsev LACT

Predictable temporary file in /tmp allows symlink attack in LACT

Published

Follow this CVE+ Monitor LACT

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.2%
UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Affected products
ilya-zlobintsev · LACT
Related CVEs — ilya-zlobintsev LACT

In the same product, most dangerous first.

CVE-2026-75037HIGHPolkit authentication bypass in LACTEPSS 0.2%