CVE-2026-104618
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.
Risk Assessment
Low-privileged local users can read secrets from the log, potentially leading to privilege escalation or disclosure of sensitive data.
Recommendation
Restrict the permissions of /var/log/sdbootutil.log or update sdbootutil to create the log with restrictive permissions.
Other vulnerabilities in sdbootutil
Original NVD description (English source)
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS