CVE-2026-78237

Published: Ago 26, 2026 Last Modified: Ago 26, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,8
Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
Attack Vector: local
Attack Complexity: high
Privileges Required: low
User Interaction: none
Scope: changed
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.

20

Improper Input Validation

Stable
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Confidentiality Integrity
Potential Impacts:
Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Read Memory Read Files Or Directories Modify Memory Execute Unauthorized Code Or Commands
Applicable Platforms
Technologies: AI/ML
Likelihood of Exploit: High
View CWE Details
https://docs.adminbyrequest.com/security-advisories/abr-mac…
https://docs.adminbyrequest.com/security-advisories/abr-mac-26-02.htm
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026…
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-110/