CVE-2026-75037

HighCVSS 7.0

Published: 25/08/2026(UTC)Updated: 28/09/2026(UTC)Translated: 25/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

4th percentile - higher than 4% of all known CVEs

Summary

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566.

Risk Assessment

An attacker could bypass authentication, potentially leading to unauthorized access to administrative functions or other sensitive operations.

Recommendation

Update LACT to a version containing the fix (commit d0478fe42c2219454e272f96b1cbd29ab37ee566) or later.

Other vulnerabilities in LACT

CVE-2026-75038Medium
A vulnerability in LACT (through 0.10.0) allows a local attacker to follow UNIX symbolic links, potentially leading to a local denial-of-service.

Original NVD description (English source)

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS