Threats tagged 'ghsa-pqrp-p4c6-2q4g'

A local privilege escalation vulnerability exists in the Multi Router Traffic Grapher (MRTG) daemon when started as root and then dropping privileges. An attacker with local access can exploit a symbolic link (symlink) following flaw by manipulating the PID file path, causing the root process to change ownership of arbitrary files to the daemon user. This vulnerability is tracked as CVE-2026-72694 and has a CVSS score of 7.1 (high severity). Red Hat has released security updates addressing this issue for Red Hat Enterprise Linux versions 9 and 10.