CyberRota
Back to database

CVE-2026-35368

HIGH · CVSS 7.8 EPSS 0.01% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-04-22 · Last synced: 2026-05-22

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-35368
Severity
HIGH
CVSS
7.8
EPSS
0.01%

Original NVD Description

A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves the user specification via getpwnam() after entering the chroot but before dropping root privileges. On glibc-based systems, this can trigger the Name Service Switch (NSS) to load shared libraries (e.g., libnss_*.so.2) from the new root directory. If the NEWROOT is writable by an attacker, they can inject a malicious NSS module to execute arbitrary code as root, facilitating a full container escape or privilege escalation.