CVE-2026-4878
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
29/100
Published: 2026-04-09
Modified: 2026-10-26
First seen: 2026-10-29
Status: active
Attack Surface
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.
Weakness Classification (1)
Affected Software (5)
| Vendor | Product | Version |
|---|---|---|
| libcap_project | libcap | - |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux | 10.0 |
| redhat | openshift_container_platform | 4.0 |
References & Advisories (51)
Vendor Advisory
Vendor Advisory
Permissions Required
Mailing List
Third Party Advisory
Mailing List
Third Party Advisory
Mailing List
Third Party Advisory
Issue Tracking
Vendor Advisory
Exploit
Mailing List
Third Party Advisory
Exploit
Mailing List
Third Party Advisory
Showing 25 of 51 references