Search: CVE-2026-88924

CVE-2026-88924 is a local privilege escalation vulnerability in the GNOME gvfs admin backend. The gvfsd-admin daemon improperly changes ownership of private D-Bus sockets using a link-following chown() call on user-controlled paths. This allows a local attacker to exploit a TOCTOU race condition by replacing the socket pathname with a symlink to a root-owned file, causing the daemon to change ownership of critical system files to the attacker. Successful exploitation leads to full root privileges.