CVE-2026-61898highCWE-78

CVE-2026-61898: falha de alta gravidade em Canonical accountsservice

accountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scripts

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar accountsservice

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.8epss 0.2%
The Ubuntu-specific language helper scripts (save-to-pam-env, update-langlist) shipped with accountsservice before 23.13.9-8ubuntu7 treat the user-controlled LANGUAGE entry in ~/.pam_environment as trusted input. The value is interpolated unescaped into a GNU sed replacement expression, allowing an attacker to inject a sed 'e' flag and arbitrary shell commands that execute with the privileges of the AccountsService helper process (real UID 0) via the SetLanguage D-Bus method.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Canonical · accountsservice
CVEs relacionadas — Canonical accountsservice

No mesmo produto, das mais perigosas para as menos.

CVE-2026-61897HIGHaccountsservice: incomplete privilege drop when running Ubuntu-specific language helper scriptsEPSS 0.1%