Advisory Database
  • Advisories
  • Dependency Scanning
  1. pypi
  2. ›
  3. linuxfabrik-lib
  4. ›
  5. CVE-2026-53759

CVE-2026-53759: Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databases

July 6, 2026

The SQLite databases are created at predictable (static) paths in /tmp. Any user can therefore create a symlink at these paths in /tmp pointing to arbitrary files. The monitoring scripts then follows these symlinks and then creates their database at the symlink target. This becomes really dangerous for the scripts which can be executed as root with sudo. With this, an attacker can write to abitrary paths.

References

  • github.com/Linuxfabrik/monitoring-plugins/security/advisories/GHSA-r35r-fpx2-jgr4
  • github.com/advisories/GHSA-r35r-fpx2-jgr4
  • nvd.nist.gov/vuln/detail/CVE-2026-53759

Code Behaviors & Features

Detect and mitigate CVE-2026-53759 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 4.2.0

Fixed versions

  • 4.2.0

Solution

Upgrade to version 4.2.0 or above.

Impact 4 MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Learn more about CVSS

Weakness

  • CWE-377: Insecure Temporary File

Source file

pypi/linuxfabrik-lib/CVE-2026-53759.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sun, 19 Jul 2026 12:17:17 +0000.