Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-78237

Insufficient input validation in Admin By Request (ABR)

Description

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Admin By Request (ABR) Admin By Request (ABR)

Default version status: unaffected

  • 5.2.2 and belowaffected

References