The vulnerability in systemd-homed (version 245) involves improper handling of system group additions for local, logged-in homed-managed users. This flaw allows an attacker with local access and limited privileges to escalate their privileges by adding themselves to arbitrary system groups. The CVSS 3.1 vector indicates that the attack requires local access with high attack complexity, low privileges, and user interaction, but can result in high confidentiality, integrity, and availability impact.

An attacker with local access and a homed-managed user account can escalate privileges by adding themselves to arbitrary system groups, potentially gaining unauthorized access or control over system resources. This can compromise system confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user access and monitor for suspicious privilege escalations related to system group modifications.