pwnlift: symlink following and TOCTOU in privileged upload handler allow arbitrary file write as root

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-02 18:25 UTC
  • Importiert: 2026-07-16 05:08 UTC
  • CVSS: 7.4
  • Quelle-ID: full_disc
  • uid_hash: 5d1bd370585dbf6b33b5b1b0bca2e57d105cbe741692076a383985ef06b87e59
Full Disclosure

Inhalt

Posted by Greg via Fulldisclosure on Jul 02

  1. Advisory information

Title: Symlink following and TOCTOU in pwnlift upload handler allow arbitrary file write as root

Advisory: https://github.com/GregDurys/security-advisories

GHSA: GHSA-2v7v-rhpw-m9w4

CVE: CVE-2026-56815

Class: CWE-59 (Improper Link Resolution Before File Access),

CWE-367 (Time-of-check Time-of-use Race Condition)

CVSS: 7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Date: 2026-06-27...

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-56815

HIGH

7.4

HIGH

7.4

2026-06-23

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

 threat_intel - de https://seclists.org/rss/fulldisclosure.rss
Zurueck zur Eintrags-Liste