Description
A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | glusterfs | 3.x | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | glusterfs | 4.0.2-1 | — |
| Debian 13 | glusterfs | 4.0.2-1 | — |
| Debian 12 | glusterfs | 4.0.2-1 | — |
| Debian 9 | glusterfs | 3.8.8-1+deb9u1 | DLA-2806-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | glusterfs | 3.13.2-1ubuntu1+esm1 | USN-4770-1 |
| Ubuntu Pro 16.04 LTS | glusterfs | 3.7.6-1ubuntu1+esm1 | USN-4770-1 |
| Ubuntu Pro 14.04 LTS | glusterfs | 3.4.2-1ubuntu1+esm1 | USN-4770-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | glusterfs +9 | 3.8.4-54.6.el7 | RHSA-2018:1136 |
| RHEL 7 | imgbased +1 | 1.0.16-0.1.el7ev | RHSA-2018:1524 |
| RHEL 7 | ovirt-node-ng +1 | 4.2.0-0.20170814.0.el7 | RHSA-2018:1524 |
| RHEL 7 | redhat-release-virtualization-host +1 | 4.1-11.0.el7 | RHSA-2018:1524, RHSA-2018:1275 |
| RHEL 7 | redhat-virtualization-host +1 | 4.1-20180426.0.el7_5 | RHSA-2018:1524, RHSA-2018:1275 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Gluster Storage 3 | glusterfs +9 | 3.8.4-54.6.el7 | RHSA-2018:1137, RHSA-2018:1136 |
| Red Hat Gluster Storage 3 | glusterfs-events +4 | 3.8.4-54.6.el7rhgs | RHSA-2018:1137, RHSA-2018:1136 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.1 | glusterfs | 3.12.15-lp151.3.3.1 | openSUSE-SU-2020:0079-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
MauroEldritch/GEVAUDAN ★ 10 · Jun 11, 2018
Exploit for Red Hat / GlusterFS CVE-2018-1088 & CVE-2018-1112, featured @ DEFCON 26, Las Vegas!
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 7
- RHSA-2018:1524 Red Hat Security Advisory: redhat-virtualization-host bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- USN-4770-1 glusterfs vulnerabilities Ubuntu Security Notices (USN) · Jun 29, 2026
- RHSA-2018:1275 Red Hat Security Advisory: redhat-virtualization-host security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:1137 Red Hat Security Advisory: glusterfs security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:1136 Red Hat Security Advisory: glusterfs security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DLA-2806-1 glusterfs - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2020:0079-1 Security update for glusterfs SUSE / openSUSE Security Updates · Feb 4, 2026
References
- RHSA-2018:1137 vendor-advisory
- RHSA-2018:1275 vendor-advisory
- RHSA-2018:1524 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1558721
- RHSA-2018:1136 vendor-advisory
- GLSA-201904-06 vendor-advisory
- openSUSE-SU-2020:0079 vendor-advisory
- [debian-lts-announce] 20211101 [SECURITY] [DLA 2806-1] glusterfs security update mailing-list