CVE-2022-41950: Privilege Escalation Vulnerability by wrong chmod param

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-11-22 · updated 2026-06-17
Weakness: CWE-250

Description

super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta.

Affected products

4ra1n super-xray: 0.2-beta

References

https://github.com/4ra1n/super-xray/releases/tag/0.3-beta
https://github.com/4ra1n/super-xray/security/advisories/GHSA-2g28-xrw6-fq5f
https://github.com/4ra1n/super-xray/releases/tag/0.3-beta
https://github.com/4ra1n/super-xray/security/advisories/GHSA-2g28-xrw6-fq5f

Get alerted when CVE-2022-41950 or the next vulnerability affects your stack