acl project CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH acl project CVE published 2026-06-29

CVE-2026-54369

The acl library, specifically in the libacl pathname-based functions, contains a vulnerability that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. This issue, tracked as CVE-2026-54369, affects versions of acl prior to 2.4.0. The vulnerability enables unauthorized manipulation of access control lists and local privilege escalation. System administra [truncated]