NVD

CVE-2026-54369 Detail

Unsupported When Assigned

Not Scheduled

This CVE record is not being prioritized for NVD enrichment efforts due to resource or other concerns.

Description

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

Nist CVSS score does not match with CNA score

CNA: VulnCheck

CVSS-B 8.4 HIGH

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CVSS 3.x Severity and Vector Strings:

CNA: VulnCheck

Base Score: 7.1 HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

ADP: redhat-SADP

Base Score: 7.1 HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL	Source(s)	Tag(s)
https://access.redhat.com/security/cve/CVE-2026-54369	redhat-SADP
https://bugzilla.redhat.com/show_bug.cgi?id=2490277	redhat-SADP
https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5	VulnCheck
https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1	VulnCheck
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json	redhat-SADP
https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions	VulnCheck

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-59	Improper Link Resolution Before File Access ('Link Following')	redhat-SADP VulnCheck

Change History

3 change records found show changes

CVE Modified by redhat-SADP 6/29/2026 11:21:02 PM

Action	Type	New Value
Added	CVSS V3.1	AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Added	CWE	CWE-59
Added	Reference	https://access.redhat.com/security/cve/CVE-2026-54369
Added	Reference	https://bugzilla.redhat.com/show_bug.cgi?id=2490277
Added	Reference	https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json
Added	Affected	[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"affected","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"]}]

New CVE Received from VulnCheck 6/29/2026 10:16:57 AM

Action	Type	New Value
Added	Tag	unsupported-when-assigned
Added	Description	acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.
Added	CVSS V4.0	AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Added	CVSS V3.1	AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Added	CWE	CWE-59
Added	Reference	https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5
Added	Reference	https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1
Added	Reference	https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions
Added	Affected	[{"vendor":"acl project","product":"acl","defaultStatus":"affected","repo":"https://savannah.nongnu.org/projects/acl/","versions":[{"version":"0","lessThan":"2.4.0","versionType":"semver","status":"affected"}]}]

Quick Info

CVE Dictionary Entry:
CVE-2026-54369
NVD Published Date:
06/29/2026
NVD Last Modified:
06/29/2026
Source:
VulnCheck

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database