CVEvulnerability

CVE-2026-46388

4.4 MEDIUM Published 2026-07-10 Modified 2026-07-10 Official page ↗

Status: Deferred
Published: 2026-07-10
Last modified: 2026-07-10
Assigner: [email protected]
CVSS 3.1 ([email protected]): 4.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
Weaknesses: CWE-279, CWE-378, CWE-379

Description

osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unprivileged attacker can read the contents of an osquery file carve until the carve completes and the temporary files are deleted because in-progress carve directories are not created with private permissions. If the carve targets a directory that the attacker controls, arbitrary file reads are possible, such as sensitive local files. This issue is fixed in version 5.23.1.

Weakness · CWE (3)

CWE-279 Incorrect Execution-Assigned Permissions weakness
CWE-378 Creation of Temporary File With Insecure Permissions weakness
CWE-379 Creation of Temporary File in Directory with Insecure Permissions weakness

References

https://github.com/osquery/osquery/commit/6dabe9ded33bf9c6fc0f3e37ec364a1cbbd25d68 github.com
https://github.com/osquery/osquery/pull/8961 github.com
https://github.com/osquery/osquery/releases/tag/5.23.1 github.com
https://github.com/osquery/osquery/security/advisories/GHSA-fg78-9q98-62hh github.com

CVE-2026-46388

Description

Related

Weakness · CWE (3)

References