CVE-2020-36657: Uptimed Project Uptimed

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

uptimed before 0.4.6-r1 on Gentoo allows local users (with access to the uptimed user account) to gain root privileges by creating a hard link within the /var/spool/uptimed directory, because there is an unsafe chown -R call.

Affected products

• Uptimed Project Uptimed: before 0.4.6 (fixed in 0.4.6)

Published 2023-01-26. Last modified 2026-06-17.