What’s Vulnerable › Vulnerabilities

CVE-2026-75037: Polkit authentication bypass in LACT

• Severity: high (CVSS 7.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-25 · updated 2026-09-28
• Weakness: CWE-290

Description

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566.

Affected products

• ilya-zlobintsev LACT: through 0.10.0

References

• https://bugzilla.suse.com/show_bug.cgi?id=1276480
• https://github.com/ilya-zlobintsev/LACT

Get alerted when CVE-2026-75037 or the next vulnerability affects your stack