CVE-2026-59260

نوع الضعف

OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing authenticated delegated users to execute the Samba daemon with caller-controlled command-line arguments. Attackers can pass arbitrary Samba global options such as message command to a root smbd process, triggering command execution when SMB protocol messages are processed.

المراجع

• https://github.com/openwrt/luci/security/advisories/GHSA-vx64-mmp7-h36c
• https://www.vulncheck.com/advisories/openwrt-luci-app-samba4-read-acl-remote-code-execution-via-smbd
• https://github.com/openwrt/luci/security/advisories/GHSA-vx64-mmp7-h36c