CVE-2018-6693: McAfee Endpoint Security For Linux Threat Prevention

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specific scanning sequence, the unprivileged user is able to perform a privilege escalation to delete arbitrary files.

Affected products

• McAfee Endpoint Security For Linux Threat Prevention: up to and including 10.2.3; version 10.5.1 only
• McAfee Endpoint Security Linux Threat Prevention: version 10.5.0 only

Published 2018-09-18. Last modified 2026-06-17.