Skip to content
CVE-2026-110331: ABRT Flaw Allows Local Privilege Escalation

CVE-2026-110331: ABRT Flaw Allows Local Privilege Escalation

First seen 14 Nov 2026, 21:42 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 14, 2026 at 21:43 UTC
  • •CVE-2026-110331 allows local privilege escalation in ABRT.
  • •Risk is highest on multi-user enterprise Linux systems.
  • •Immediate action recommended: disable ABRT if not needed.

A vulnerability identified as CVE-2026-110331 was discovered in the ABRT crash-reporting tool, which allows unprivileged users to bypass security checks and potentially poison dump directories or seize ownership of them. This flaw stems from an incomplete mitigation of previously reported vulnerabilities CVE-2026-54228 and CVE-2026-54229. The risk is particularly high for multi-user enterprise Linux systems where local accounts may not be fully trusted. Attackers can exploit this vulnerability by having local access and low-level privileges, manipulating the report-processing workflow while privileged handlers are active. Red Hat advises disabling or removing ABRT if it is not necessary and restricting local user access on affected systems. The vulnerability was published on November 13, 2026, with a CVSS score of 7.8, indicating a high severity level. No proof-of-concept or has been confirmed at this time.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-06-13
CVE-2026-54228 and CVE-2026-54229 published
Two vulnerabilities in ABRT were disclosed, both rated high severity with CVSS scores of 7.0 and 7.8.
Redpacketsecurity
2026-11-13
CVE-2026-110331 published
A new vulnerability in ABRT was disclosed, allowing local users to bypass security checks and alter dump directories.
access.redhat.com

More articles in this cluster (3)

Following this threat?

Track Red Hat and CVE-2026-110331 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 3

Common questions

How can I mitigate this vulnerability?
Disable or remove ABRT services if they are not required, and restrict local user access.
What systems are affected?
Multi-user enterprise Linux hosts with ABRT crash-reporting services enabled are most at risk.
Is there a patch available?
As of now, a patch has not been released; monitor for updates from Red Hat.