---
id: "CVE-2026-123040"
page: "https://infrastack.ai/live/CVE-2026-123040"
kind: "vulnerability"
aliases: ["CVE-2026-123040"]
title: "TrueConf Server (Linux): local code execution user escalates to root"
severity: "high"
cvss: 8.5
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["linux", "runtime", "self-hosted", "trueconf-server"]
not_affected_if: ["version-5.5.6-or-later", "windows-install"]
published_at: "2026-11-11T14:17:32+00:00"
first_seen_at: "2026-11-11T14:27:30+00:00"
updated_at: "2026-11-11T14:29:20+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123040", "first_seen_at": "2026-11-11T14:27:30+00:00"}]
exploit_sources: []
---

# TrueConf Server (Linux): local code execution user escalates to root

Link for people: https://infrastack.ai/live/CVE-2026-123040 (this .md is for agents)

TrueConf Server on Linux, versions 4.7.2 up to but not including 5.5.6, lets an attacker who already runs code as the trueconf user gain root privileges. The flaw needs a separate foothold first; it does not by itself give remote access.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed TrueConf Server version on the Linux host against the affected range `4.7.2` to `5.5.6`

## Fix

- TrueConf Server: move to `5.5.6` or later (the first fixed version named in the sources)

## Timeline

- 2026-11-11T14:27:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123040

## From the sources

An attacker who gains the ability to execute arbitrary code on a system with TrueConf Server (Linux) versions from 4.7.2 up to, but not including, 5.5.6 installed, running as the user trueconf (by exploiting some other vulnerability), can elevate their privileges to root.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_