CVE-2014-8169: Automount Project Automount

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home directory.

Affected products

• Automount Project Automount: version 5.0.8 only
• Opensuse Opensuse: version 13.1 only; version 13.2 only
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Hpc Node: version 6.0 only
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Workstation: version 6.0 only

Published 2015-03-18. Last modified 2026-06-17.