CVE-2024-56433Low· 3.6▾ TwilightPoC availableshadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered n…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 19.8 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
1 GitHub repo (last check)
shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114397High· 7.4Trudesk through 1.2.11 Missing Authentication on Debug Routes
CVE-2026-111764High· 7.5A2A Java SDK has a fail-open default task authorization
CVE-2026-77934High· 8.8Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
CVE-2026-77936Critical· 9.8Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access
CVE-2026-109437Critical· 9.8Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend
CVE-2026-103091Critical· 9.3Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM)