Back Linuxsecurity

Fedora 43 mrtg Important Symlink Privilege Escalation Fix CVE-2026

Linuxsecurity •LinuxSecurity Advisories • September 4, 2026

Share: View original

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

The Multi Router Traffic Grapher (MRTG) is a tool to monitor the traffic

load on network-links. MRTG generates HTML pages containing PNG

images which provide a LIVE visual representation of this traffic.

Fix CVE-2026-72694: symlink-following privilege escalation in PID file handling

* Wed Aug 26 2026 Vitezslav Crhonek - 2.17.10-13 - Fix CVE-2026-72694: symlink-following privilege escalation in PID file handling Resolves: #2513829

[ 1 ] Bug #2460973 - CVE-2026-72694 mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-4522f50b2c' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora MRTG Privilege Escalation Vulnerability Patched A symlink-following privilege escalation vulnerability (CVE-2026-72694) was identified in the Multi Router Traffic Grapher (MRTG), affecting Fedora systems. The vulnerability allows local privilege escalation via PID file path manipulation. Fedora has released patches for MRTG versions 2.17.10-13 and 2.17.10-14 to address this issue. Users are advised to apply the updates promptly to secure their systems. The vulnerability was published on August 11, 2026, and is linked to bug report #2460973. The exploit could potentially allow unauthorized users to gain elevated privileges on affected systems. The patch can be installed using the 'dnf' update program. Security professionals should ensure their systems are updated to mitigate risks associated with this vulnerability. 2 sources 45

Extracted Entities

Fedora 43 mrtg Important Symlink Privilege Escalation Fix CVE-2026

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)