CVE-2019-18192

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p28

Published

Oct 17, 2019 (Oct 17, 2019)

Modified

Jun 17, 2026

Description

GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365.

Vendors: gnu
Products: guix
Weakness: CWE-732
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.