CyberRota Analysis
AI-GeneratedA vulnerability exists in the accountsservice where the systemd-homed code path for SetIconFile allows a local attacker with a managed account to open a user-supplied filename as root, bypassing necessary validation and privilege restrictions. This flaw could enable the attacker to read arbitrary files accessible to the accounts-daemon process, potentially exposing sensitive information. Organizations using systemd-homed should prioritize patching this vulnerability to mitigate the risk of local privilege escalation and data exposure.
Original NVD Description
A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to the accounts-daemon process.