This vulnerability in cosmic-greeter arises from improper handling of privilege dropping combined with a time-of-check to time-of-use (TOCTOU) race condition. An attacker with limited privileges can exploit the race condition to regain elevated privileges that should have been relinquished, potentially abusing them within the racy checking logic. The issue affects versions prior to the fix merged in the GitHub pull request https://github.Com/pop-os/cosmic-greeter/pull/426. The CVSS 4.0 vector indicates local attack vector, high attack complexity, no user interaction, and limited privileges required. No known exploits are reported in the wild, and no official patch link is provided in the input data.

Successful exploitation allows an attacker to regain elevated privileges that were intended to be dropped, potentially enabling unauthorized actions within the affected system. The impact is limited by the requirement for local access and high attack complexity. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The input references a GitHub pull request that presumably contains the fix, but no official patch or vendor advisory link is provided. Until an official fix is confirmed, users should monitor vendor communications for updates and avoid running untrusted code with elevated privileges in cosmic-greeter environments.