{"id":"CVE-2026-59630","kind":"vulnerability","aliases":["CVE-2026-59630"],"related":[],"title":"Android-style policy check flaw lets attackers downgrade stored security policies locally","description":"In check_constraint_monotonicity of lib.rs, there is a possible way to downgrade stored security policies and bypass rollback protection due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"A logic error in check_constraint_monotonicity in lib.rs lets stored security policies be downgraded and rollback protection bypassed. The description says an attacker gets local privilege escalation with no extra execution privileges and no user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["local-privilege-escalation","other","rust"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:32+00:00","first_seen_at":"2026-11-10T20:46:15+00:00","triaged_at":"2026-11-10T20:49:32+00:00","updated_at":"2026-11-10T20:49:32+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-10T20:49:32Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android-style policy check flaw lets attackers downgrade stored security policies locally","impact":"high","summary":"A logic error in check_constraint_monotonicity in lib.rs lets stored security policies be downgraded and rollback protection bypassed. The description says an attacker gets local privilege escalation with no extra execution privileges and no user interaction.","audience":"businesses","category":"other","nicknames":[],"who_cares":["rust","local-privilege-escalation"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local attacker escalates privileges by downgrading stored security policies","analyst_note":"Identify the affected product and its lib.rs path from the NVD entry or upstream advisory, then confirm affected versions and fixed release.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000639,"input_tokens":4538,"output_tokens":371,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-59630':16A,19A 'addit':98C 'android':2A 'android-styl':1A 'attack':8A,49B 'bypass':44B,80C 'check':5A,30B,64C 'constraint':31B,65C 'could':89C 'cve':14A,17A 'descript':46B 'downgrad':9A,40B,75C 'due':83C 'error':28B,87C 'escal':23B,53B,93C 'execut':57B,99C 'exploit':108C 'extra':56B 'flaw':6A 'get':50B 'interact':62B,103C 'lead':90C 'let':7A,35B 'lib.rs':34B,68C 'local':13A,21B,51B,92C 'local-privilege-escal':20B 'logic':27B,86C 'monoton':32B,66C 'need':101C,106C 'polici':4A,12A,38B,78C 'possibl':72C 'privileg':22B,52B,58B,95C,100C 'protect':43B,82C 'rollback':42B,81C 'rust':25B 'say':47B 'secur':11A,37B,77C 'store':10A,36B,76C 'style':3A 'user':61B,102C 'way':73C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["localprivilegeescalation","other","rust","unknown"],"campaign_type":null,"search_a":"'-2026':15A,18A '-59630':16A,19A 'android':2A 'android-styl':1A 'attack':8A 'check':5A 'cve':14A,17A 'downgrad':9A 'flaw':6A 'let':7A 'local':13A 'polici':4A,12A 'secur':11A 'store':10A 'style':3A","search_b":"'attack':49B 'bypass':44B 'check':30B 'constraint':31B 'descript':46B 'downgrad':40B 'error':28B 'escal':23B,53B 'execut':57B 'extra':56B 'get':50B 'interact':62B 'let':35B 'lib.rs':34B 'local':21B,51B 'local-privilege-escal':20B 'logic':27B 'monoton':32B 'polici':38B 'privileg':22B,52B,58B 'protect':43B 'rollback':42B 'rust':25B 'say':47B 'secur':37B 'store':36B 'user':61B","search_c":"'addit':98C 'bypass':80C 'check':64C 'constraint':65C 'could':89C 'downgrad':75C 'due':83C 'error':87C 'escal':93C 'execut':99C 'exploit':108C 'interact':103C 'lead':90C 'lib.rs':68C 'local':92C 'logic':86C 'monoton':66C 'need':101C,106C 'polici':78C 'possibl':72C 'privileg':95C,100C 'protect':82C 'rollback':81C 'secur':77C 'store':76C 'user':102C 'way':73C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:32+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-59630","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59630","severity":null,"published_at":"2026-11-10T20:19:32+00:00","modified_at":"2026-11-10T20:19:32+00:00","first_seen_at":"2026-11-10T20:46:15+00:00","fetched_at":"2026-11-10T20:46:15+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}