CVE-2009-3589: Inotify Incron

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table.

Affected products

• Inotify Incron: version 0.5.5 only

Published 2009-10-08. Last modified 2026-06-16.