CVE Intelligence

Ilya-zlobintsev vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ilya-zlobintsev products: 2 record(s), with severity, exploitation and fixes.

LACT 2

Exploited only (KEV) →

CVE-2026-75038 Medium · 6.1 CWE-61 Aug 25, 2026
Predictable temporary file in /tmp allows symlink attack in LACT
UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0.
CVE-2026-75037 High · 7.0 CWE-290 Aug 25, 2026
Polkit authentication bypass in LACT
Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566.