CVE-2026-53759

Name of the Vulnerable Software and Affected Versions linuxfabrik-monitoring-plugins (affected versions not specified)

Description SQLite databases are created using predictable static paths in /tmp, allowing any user to create a symlink at these locations pointing to arbitrary files. When monitoring scripts are executed, they follow these symlinks and create the database at the target location. This is particularly critical for scripts executed as root via sudo, as it enables an attacker to write to arbitrary paths. This issue can lead to a denial of service or allow the modification of existing SQLite databases if an attacker provides a specially-crafted SQLite Rollback Journal (.db-journal) or Write-Ahead-Log (.db-wal).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, use systemd's PrivateTemp to isolate the temporary directory. Restrict the use of the /tmp directory for database creation by implementing per-user directories and verifying that the directory is not a symlink using os.lstat(), ensuring the owner matches the current user, and verifying that permissions are restricted.