Xlabai Team

In ptrace-based intercept mode, the software fails to apply intercept policy checks to the `execveat` system call. This allows users who are permitted to run specific commands to execute denied programs by calling `execveat` directly or through `fexecve`, which bypasses policy enforcement and logging.

An unauthenticated attacker can cause a denial-of-service condition by repeatedly initiating or canceling root token generation or rekey operations. This action occupies the single in-progress operation slot, which prevents legitimate operators from completing these specific workflows.

The Downloader integration does not completely validate file paths when combining them, which creates a directory traversal issue. This allows unauthorized access to files outside the intended directory.

The GOSTCTR implementation in the G3413CTRBlockCipher program files is unable to process more than 255 blocks correctly, resulting in the use of a broken or risky cryptographic algorithm.