CVE-2026-61897 - An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 (root). A shell spawned by a helper script inherits ruid=0 and may reset its effective UID to root, enabling local privilege escalation. - 漏洞详情

漏洞编号：CVE-2026-61897

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-61897

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-273

发布/更新时间：2026-08-20 / 2026-08-28

漏洞描述

An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 (root). A shell spawned by a helper script inherits ruid=0 and may reset its effective UID to root, enabling local privilege escalation.

漏洞描述

相关链接

相关漏洞