VDB

CVE-2026-4878

CVE-2026-4878 PUBLISHED CVSS 6.699999809265137 MEDIUM

A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.

EPSS 0.01% · 2.5th percentile

Risk Scores

CVSS v3.1
6.699999809265137
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.01%
2.5th percentile

Affected Products

VendorProductVersions
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat OpenShift Container Platform 4
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Hardened Images
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 7

Timeline

  • Apr 9, 2026 CVE Published
  • Apr 10, 2026 EPSS Score
  • Apr 10, 2026 Security Advisory
  • Apr 26, 2026 Distribution Patch
  • Apr 26, 2026 Security Advisory
  • Apr 30, 2026 Distribution Patch
  • Apr 30, 2026 Security Advisory
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Security Advisory
  • May 3, 2026 Distribution Patch
  • May 3, 2026 Distribution Patch
  • May 4, 2026 Distribution Patch

References

…and 6 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›