Vulnerability · Published Jul 12, 2026 · Assigned by VulnCheck
CVE-2026-59260OpenWrt luci-app-samba4 read ACL remote code execution via smbd
High 8.8
In plain English
A high-severity privilege mismanagement in luci from openwrt. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.9%top 40.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing authenticated delegated users to execute the Samba daemon with caller-controlled command-line arguments. Attackers can pass arbitrary Samba global options such as message command to a root smbd process, triggering command execution when SMB protocol messages are processed.
Affected products (as reported)
Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- GitHub Security Advisory (GHSA-vx64-mmp7-h36c) vendor-advisory
- VulnCheck Advisory: OpenWrt luci-app-samba4 read ACL remote code execution via smbd third-party-advisory