CLEANSTART-2024-YS78342

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-YS78342.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2024-YS78342
Upstream
Published
2026-10-31T14:31:56Z
Modified
2026-10-31T16:03:08Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user
Details

Security vulnerability affects the polkit package. It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user.

References

Affected packages

CleanStart / polkit

Package

Name
polkit
Purl
pkg:apk/cleanstart/polkit

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.119-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-YS78342.json"