Live › vulnerability › CVE-2026-57203
Go to dashboardThe ast_loggrabber tool in Asterisk runs a Python script taken from the world-writable /tmp directory. A local user who already has a shell on the server can plant a malicious script there and gain elevated privileges when an administrator runs the tool.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 22:29 UTC. All times on this page are UTC.
Servers running affected Asterisk releases where someone runs ast_loggrabber with elevated privileges. The exposure requires an attacker who already has a shell account on the machine, so multi-user or shared hosts carry the most risk. Single-operator servers where ast_loggrabber is never run by a privileged user can skip it.
No product ranges from the sources yet.
asterisk -V and compare it to the fixed releases listed below.ast_loggrabber is present and who runs it, for example with which ast_loggrabber and by reviewing sudo rules.20.20.1 or later, Asterisk 21 to 21.12.3 or later, Asterisk 22 to 22.10.1 or later, and Asterisk 23 to 23.4.1 or later.20.7-cert11 or later and Certified Asterisk 22.8 to 22.8-cert3 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, ast_loggrabber executes a Python script from the world-writable /tmp directory. An attacker already authorized to open a shell session on the Asterisk server may place a malicious script there and gain elevated privileges or execute code when an administrator runs ast_loggrabber as a user with elevated privileges. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.
This page as .md · .json · in your agent: get_signal("CVE-2026-57203")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.