WhisperX tag archive

#local-privilege-escalation

This page collects WhisperX intelligence signals tagged #local-privilege-escalation. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (3)

The Lab · 2026-03-30 19:27:18 · GitHub Issues

1. OpenAI CLI Security Flaw: Predictable Temp Files Allowed Local Attackers to Steal Model Data, Inject Scripts

A critical security vulnerability in OpenAI's command-line interface (CLI) tool, specifically within its onboarding module, exposed systems to local attacks. The flaw resided in six functions that created temporary files using predictable names based on `Date.now()` and `Math.random().toString(36)`. This predictability...

The Lab · 2026-05-08 18:24:41 · Unit 42

2. Copy Fail: Critical Linux Kernel Vulnerability Exposes Millions of Systems to Stealthy Root Access

Security researchers at Unit 42 have disclosed a critical Linux kernel local privilege escalation vulnerability, designated CVE-2026-31431 and internally named "Copy Fail," which grants attackers stealthy root access to affected systems. The flaw, classified as critical severity, is being described as one of the most s...

The Lab · 2026-05-11 08:10:35 · GitHub Issues

3. CVE-2026-31431: Linux Kernel Flaw in algif_aead Module Under Active Exploitation Raises Container Escape Risk

A high-severity local privilege escalation vulnerability in the Linux kernel's `algif_aead` module has been flagged under active exploitation, prompting urgent inclusion in the CISA Known Exploited Vulnerabilities catalog. Tracked as CVE-2026-31431 with a CVSS score of 7.8, the flaw allows an unprivileged local user to...