Live › vulnerability › CVE-2026-104715
Go to dashboardcifs-utils mishandles input from a user-controlled credentials file when a privileged service mounts a CIFS share. A local user can inject unauthorized mount options, bypass permission checks and run files with root privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Linux hosts with cifs-utils 4.2-7.8 where a privileged service (pam_mount, automation, scripts run as root) mounts a CIFS/SMB share using a credentials file a local unprivileged user can write. Red Hat says default RHEL installs do not do this, so exposure is limited to non-standard setups. Hosts without CIFS mounts, or with root-owned credentials files, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| cifs-utils | linux | >= 4.2, <= 7.8 | 7.9 |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-104715")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.