CVE-2024-39934

Name of the Vulnerable Software and Affected Versions Robotmk versions prior to 2.0.1

Description The issue allows a local user to escalate privileges, for example, to SYSTEM, if automated Python environment setup is enabled. This is due to the "shared holotree usage" feature, which allows any user to edit any Python environment.

Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issue. As a temporary workaround, consider disabling the automated Python environment setup until a patch is available. Restrict access to the "shared holotree usage" feature to minimize the risk of exploitation.