Canimaan Software CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Canimaan Software CVE published 2026-10-05

CVE-2026-105773

CVE-2026-105773 is a local privilege escalation vulnerability in Canimaan Software's ClamXAV, affecting versions 3.3 through 3.11. The issue is caused by a race condition and insufficient file validation in the Privileged Helper Tool, allowing local attackers to execute arbitrary code with system privileges. The vulnerability was fixed in version 3.11.1.