CVE-2026-4878

Name of the Vulnerable Software and Affected Versions libcap (affected versions not specified)

Description A flaw exists in libcap where a local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the cap set file() function. This allows an attacker with write access to a parent directory to redirect file capability updates to a file controlled by the attacker. Capabilities can be injected into or stripped from unintended executables, potentially leading to privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.