CVE-2026-58302

Name of the Vulnerable Software and Affected Versions LinuxCNC versions prior to 2.9.9

Description The rtapi app component in linuxcnc-uspace is installed with SUID root permissions and utilizes the dlopen() function to load shared library modules based on a user-supplied module name. Due to insufficient validation of this module name, a path traversal attack is possible, allowing an unprivileged local user to load an arbitrary shared library. Since the process maintains elevated privileges during the loading process, this leads to local privilege escalation to root.

Recommendations Update LinuxCNC to version 2.9.9 or later.