Log in Start free

Vulnerability · Published Jun 29, 2026 · Assigned by VulnCheck

CVE-2026-54369acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

High 7.1

In plain English

A high-severity security flaw in acl from acl project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.2%top 95.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10acl2.4.0-1.el10_2ALSA-2026:42739
AlmaLinux:8acl2.4.0-1.el8_10ALSA-2026:43420
AlmaLinux:9acl2.4.0-1.el9_8ALSA-2026:42736
AlmaLinux:10libacl2.4.0-1.el10_2ALSA-2026:42739
AlmaLinux:8libacl2.4.0-1.el8_10ALSA-2026:43420
AlmaLinux:9libacl2.4.0-1.el9_8ALSA-2026:42736
AlmaLinux:10libacl-devel2.4.0-1.el10_2ALSA-2026:42739
AlmaLinux:8libacl-devel2.4.0-1.el8_10ALSA-2026:43420
AlmaLinux:9libacl-devel2.4.0-1.el9_8ALSA-2026:42736
Debian:12aclno fix listedDEBIAN-CVE-2026-54369
Debian:13aclno fix listedDEBIAN-CVE-2026-54369
Debian:14acl2.4.0-1DEBIAN-CVE-2026-54369
Rocky Linux:10acl0:2.4.0-1.el10_2RLSA-2026:42739
Rocky Linux:8acl0:2.4.0-1.el8_10RLSA-2026:43420
Rocky Linux:9acl0:2.4.0-1.el9_8RLSA-2026:42736
Ubuntu:22.04:LTSaclno fix listedUBUNTU-CVE-2026-54369
Ubuntu:24.04:LTSaclno fix listedUBUNTU-CVE-2026-54369
Ubuntu:25.10aclno fix listedUBUNTU-CVE-2026-54369
Ubuntu:26.04:LTSaclno fix listedUBUNTU-CVE-2026-54369

Affected products (as reported)

VendorProductVersions
acl project acl 0 – before 2.4.0

Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References