CVE-2026-54369: Acl Project Acl

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.

Affected products

Acl Project Acl: before 2.4.0 (fixed in 2.4.0)
Red Hat Red Hat Discovery 2: before 1784821670 (fixed in 1784821670); before 1784821750 (fixed in 1784821750)
Red Hat Red Hat Enterprise Linux 10: before 0:2.4.0-1.el10_2 (fixed in 0:2.4.0-1.el10_2)
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: before 0:2.4.0-0.el10_0.1 (fixed in 0:2.4.0-0.el10_0.1)
Red Hat Red Hat Enterprise Linux 6
Red Hat Red Hat Enterprise Linux 7
Red Hat Red Hat Enterprise Linux 8: before 0:2.4.0-1.el8_10 (fixed in 0:2.4.0-1.el8_10)
Red Hat Red Hat Enterprise Linux 9: before 0:2.4.0-1.el9_8 (fixed in 0:2.4.0-1.el9_8)
Red Hat Red Hat Hardened Images: before 2.4.0-0.1.hum1 (fixed in 2.4.0-0.1.hum1)
Red Hat Red Hat Insights Proxy 1.5: before 1786433656 (fixed in 1786433656)
Red Hat Red Hat Openshift Container Platform 4
Red Hat Red Hat Openshift Container Platform 4.22: before 4.22.9.8.202608130832-0 (fixed in 4.22.9.8.202608130832-0)
Red Hat Red Hat Openshift Distributed Tracing 3.10.2: before 1785704636 (fixed in 1785704636)
Red Hat Red Hat Update Infrastructure 5: before 1784794818 (fixed in 1784794818); before 1784794778 (fixed in 1784794778); before 1784795112 (fixed in 1784795112); before 1784794289 (fixed in 1784794289); before 1784795076 (fixed in 1784795076); before 1787241211 (fixed in 1787241211); …

Published 2026-06-29. Last modified 2026-09-14.