Vulnerability · Published Aug 28, 2026 · Assigned by VulnCheck

CVE-2026-82018IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.conf File

Medium 6.1

In plain English

A medium-severity security flaw in IGEL OS 11 from IGEL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).

Severity (CVSS 3.1)6.1Medium

Exploit odds (30 days)0.3%top 83.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit GRUB's fail-open signature verification behavior to drop into an interactive GRUB prompt, then boot the device's own kernel with additional command-line arguments to obtain a root shell with the disk unlocked while leaving TPM PCR values unaltered.

Affected products (as reported)

Vendor	Product	Versions
IGEL	IGEL OS 12	12.0.0 – through 12.8.2
IGEL	IGEL OS 11	11.0.0 – before 11.11.150

Weakness: CWE-636 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

Vendor Advisory vendor-advisory, patch
AmberWolf Blog technical-description
DEF CON 34 Presentation
https://www.vulncheck.com/advisories/igel-os-12-11-secure-boot-bypass-via-unsigned-igel-conf-file third-party-advisory