A critical vulnerability in GNU C Library versions 2.27 through 2.38 allows an attacker to control the loading of dynamically shared libraries via the LD_LIBRARY_PATH environment variable in statically compiled setuid binaries that use dlopen. This can lead to full system compromise due to arbitrary code execution.