CVE-2026-53759
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 4.2.0, db_sqlite.py created SQLite databases at predictable paths in the shared /tmp directory and followed attacker-created symbolic links at those paths. An attacker who controls a local monitoring account can create a symlink such as /tmp/linuxfabrik-monitoring-plugins-docker-stats.db and then trigger a sudo-authorized plugin, causing the root process to create or modify the symlink target. The primitive can overwrite arbitrary paths, cause denial of service, or manipulate an existing SQLite database through a crafted rollback journal or write-ahead log. The Monitoring Plugins integration also moved plugin caches through lib.db_sqlite.get_db_path() so they use the secured per-user directory. This issue is fixed in version 4.2.0.
Scoring
- Severity
- LOW
- CVSS base score
- 2
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
- EPSS probability
- 0.18%
- CWE
- CWE-377
- Published
- 2026-08-18
- Last modified
- 2026-08-21
Affected products
- Linuxfabrik monitoring-plugins
Weakness type
Related vulnerabilities
- CVE-2026-40635 — Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File...
- CVE-2026-63404 — Faktory: Insecure predictable /tmp/redis.conf enables local Redis config hijack (network exposure / root RCE primitive)
- CVE-2025-14602 — Weak File Name Generation in vsDesk
- CVE-2026-55086 — Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
- CVE-2026-75920 — phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP
- CVE-2026-73584 — Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling
- CVE-2026-73585 — Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack
- CVE-2026-16791 — Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI