CVE-2026-61897highCWE-273

CVE-2026-61897: falha de alta gravidade em Canonical accountsservice

accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar accountsservice

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.8epss 0.1%
An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 (root). A shell spawned by a helper script inherits ruid=0 and may reset its effective UID to root, enabling local privilege escalation.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Canonical · accountsservice
CVEs relacionadas — Canonical accountsservice

No mesmo produto, das mais perigosas para as menos.

CVE-2026-61898HIGHaccountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scriptsEPSS 0.2%