CVE-2026-75038

MediumCVSS 6.1

Published: 25/08/2026(UTC)Updated: 25/08/2026(UTC)Translated: 25/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

A vulnerability in LACT (through 0.10.0) allows a local attacker to follow UNIX symbolic links, potentially leading to a local denial-of-service.

Risk Assessment

An attacker with local access can cause service unavailability or disruption, impacting operational continuity.

Recommendation

Update LACT to the latest available version if a fix is available, or apply measures to restrict local access to the system.

Other vulnerabilities in LACT

CVE-2026-75037High
Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566.

Original NVD description (English source)

UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0.