A flaw was found in cifs-utils. (CVE-2026-104715)
Description
CVE-2026-104715 is a local privilege escalation vulnerability in cifs-utils. It occurs when a privileged service mounts a CIFS share using a user-controlled credentials file, and input values are not properly sanitized before being used in mount options. This allows an unprivileged local user to inject unauthorized mount options, bypass permission checks, and execute files with root privileges. The vulnerability has a high severity with a CVSS score of 7.8.
CVSS v3.1
Score 7.8high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in cifs-utils (CVE-2026-104715) enables an unprivileged local attacker to escalate privileges to root by exploiting improper sanitization of user-controlled input in mount options during the mounting of CIFS shares by privileged services. Specifically, when a privileged service mounts a CIFS share using credentials from a file controlled by the user, the input is not properly sanitized, allowing injection of unauthorized mount options. This flaw can be leveraged to bypass permission checks and execute arbitrary code with administrative privileges.
Potential Impact
An unprivileged local user can exploit this vulnerability to gain root-level privileges on the affected system. This compromises system integrity and confidentiality by allowing unauthorized execution of code with administrative rights.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local user access to credentials files used by privileged services mounting CIFS shares and avoid mounting CIFS shares with user-controlled credentials files.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-pvh7-9hhh-pfhr
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-104715"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ad2aedb2cdf04f656454bbd
Added to database: 10/16/2026, 23:10:19 UTC
Last enriched: 10/16/2026, 23:13:04 UTC
Last updated: 10/17/2026, 01:48:08 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.