CVE-2026-40031 is a high-severity vulnerability in ufrisk's MemProcFS prior to version 5.17. It involves CWE-427, an uncontrolled search path element weakness, where the software loads DLLs or shared libraries using unqualified names. This behavior affects six attack surfaces, including vmmpyc, libMSCompression, and plugin DLLs, enabling an attacker to hijack the loading process by placing malicious libraries in the working directory or altering LD_LIBRARY_PATH. Successful exploitation leads to arbitrary code execution under the context of the vulnerable application.

Exploitation of this vulnerability allows an attacker to execute arbitrary code with the privileges of the user running MemProcFS. This can lead to full compromise of the affected system or application environment. The vulnerability requires the attacker to have the ability to place malicious libraries in specific locations or manipulate environment variables influencing library loading.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently documented, users should avoid running vulnerable versions of MemProcFS in untrusted environments and restrict the ability to write to directories in the library search path. Monitor vendor communications for updates regarding patches or official mitigations.