VDB
GO-2026-4864
GO-2026-4864
PUBLISHED
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | cosign | *, *, * |
| chainguard | opencost-fips | *, *, * |
| wolfi | cloud-provider-vsphere | *, *, * |
| chainguard | gops | *, *, * |
| chainguard | longhorn-engine-1.10 | *, *, * |
| chainguard | crossplane-provider-aws-ecs-fips | *, *, * |
| chainguard | mig-parted-fips | *, *, * |
| chainguard | mattermost-11.4 | *, *, * |
| chainguard | tailscale | *, *, * |
| chainguard | flux-source-controller-fips | *, *, * |
| chainguard | splunk-otel-collector | *, *, * |
| chainguard | nri-f5 | *, *, * |
| chainguard | terraform-1.11 | 0, 0, 0 |
| chainguard | hubble | 0, 0, 0 |
| wolfi | render-template | *, *, * |
| chainguard | envoy-ratelimit | *, *, * |
| wolfi | terraform-provider-tls | *, *, * |
| chainguard | cilium-fips-1.19 | *, *, * |
| chainguard | prometheus-3.9 | 0, 0, 0 |
| wolfi | configmap-reload | *, *, * |
…and 2291 more
Timeline
- Apr 7, 2026 CVE Published
- Aug 14, 2026 CVE Updated