Archive
12 November 2026
Vulnerabilities first published on this day (UTC), newest first.
← October 2026
2026
/
November
/12
1 result · Clear filters · Feed
-
High 7.8CVE-2026-123039 Exploited
Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket
The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.