Local PrivEsc via PID Spoofing in ABRT Server (abrt.socket)
CVE-2026-110330 Published on November 13, 2026
Abrt: abrt: abrt-server trusts client-supplied pid= allowing unprivileged read of other processes' /proc environ
A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socket and, running as root, copies that process's /proc data (including environ) into a dump directory owned by the connecting unprivileged user. This allows a local attacker to read environment variables and related metadata of other users' or root processes when abrtd is running.
Vulnerability Analysis
CVE-2026-110330 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Timeline
Reported to Red Hat.
Made public. 110 days later.
Weakness Type
What is an AuthZ Vulnerability?
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVE-2026-110330 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2026-110330
stack.watch emails you whenever new vulnerabilities are published in Red Hat Rhel Els or Red Hat Enterprise Linux (RHEL). Just hit a watch button to start following.
