Threats tagged 'ghsa-m95q-vgfj-2v8g'

The Gaia OS DynamicCLI daemon runs with root privileges and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. This allows any authenticated local user to send commands to the socket and have them executed as root, leading to full system compromise.