PT-2026-39434

Published

2026-04-29

·

Updated

2026-04-29

Description by

CVSS 4.0
6.9
Medium
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Summary

The optional flag --filter-system-calls was not applied even if specified.

Details

This is a defense in depth feature to apply additional seccomp filters after the binary has started. The example config also sandboxes the binary with systemd.

Impact

Reduced sandboxing of the netfoil binary.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-791: Incomplete Filtering of Special Elements
Related identifiers
GHSA-VJGJ-42F6-7997
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com