CVE-2012-4442: Monkey-Project Monkey

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check.

Affected products

Published 2012-10-05. Last modified 2026-06-16.