CVE-2026-105773: Canimaan Software Clamxav

High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days.

Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1.

Affected products

• Canimaan Software Clamxav: from 3.3, before 3.11.1 (fixed in 3.11.1)

Published 2026-10-05. Last modified 2026-10-06.