Threats tagged 'brew-zabbix-cli-cve-2026-63349'

CVE-2026-63349 is a privilege assignment vulnerability in AnyIO versions 4.14.0 up to but not including 4.14.2. The issue arises because anyio.open_process() incorrectly forwards the extra_groups argument, causing child processes to retain parent supplementary groups instead of properly clearing or setting them. This affects POSIX privilege dropping correctness in applications relying on AnyIO subprocess helpers. The flaw can also cause a TypeError if conflicting arguments are supplied.