https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:02:11.866997+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-204698 EUVD-2026-204698 2026-10-09T20:02:11.982284+00:00 EUVD-2026-204698 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1521 fkie_cve-2023-1521 2026-10-09T20:02:11.982338+00:00

On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LD_PRELOAD.

If the server is run as root (which is the default when installing the snap package https://snapcraft.io/sccache ), this means a user running the sccache client can get root privileges.

 https://cve.radiocsirt.org/vuln/ghsa-x7fr-pg8f-93f5 GHSA-x7fr-pg8f-93f5 — sccache vulnerable to privilege escalation if server is run as root 2026-10-09T20:02:11.982397+00:00

Affected: crates.io: sccache

### Impact

On Linux the `sccache` client can execute arbitrary code with the privileges of a local `sccache` server, by preloading the code in a shared library passed to `LD_PRELOAD`.

If the server is run as root (which is the default when installing the [snap package](https://snapcraft.io/sccache)), this means a user running the `sccache` client can get root privileges.

### Patches Upgrade to 0.4.0

### Workarounds Don't run sccache server as root.

### GitHub Security Lab number

GHSL-2023-046

 https://cve.radiocsirt.org/vuln/gsd-2023-1521 gsd-2023-1521 2026-10-09T20:02:11.982457+00:00 gsd-2023-1521 https://cve.radiocsirt.org/vuln/suse-su-2023:2637-1 SUSE-SU-2023:2637-1 — Security update for sccache 2026-10-09T20:02:11.982478+00:00

Security update for sccache

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1521 UBUNTU-CVE-2023-1521 2026-10-09T20:02:11.982507+00:00

Affected: Ubuntu:Pro:24.04:LTS: sccache, Ubuntu:25.10: sccache, Ubuntu:26.04:LTS: sccache

On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LD_PRELOAD. If the server is run as root (which is the default when installing the snap package https://snapcraft.io/sccache ), this means a user running the sccache client can get root privileges.