https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 14:17:52 +0000 https://cve.radiocsirt.org/vuln/cve-2026-41236 <p><strong>Affected:</strong> froxlor</p> <p>Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned SSH key synchronization path used for customer FTP users. The provisioning code appends public keys to `~/.ssh/authorized_keys` under a customer-controlled home directory without verifying that the target path is not a symbolic link. If an attacker controls a shell-enabled customer account and can modify files inside the assigned home directory, the attacker can replace `~/.ssh/authorized_keys` with a symlink to `/root/.ssh/authorized_keys`. When Froxlor&#39;s privileged cron task later synchronizes SSH keys, it appends the attacker-supplied key into root&#39;s authorized key file, resulting in root SSH access. Version 2.3.7 contains a patch.</p> <p><strong>Affected:</strong> froxlor</p> <p>Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned SSH key synchronization path used for customer FTP users. The provisioning code appends public keys to `~/.ssh/authorized_keys` under a customer-controlled home directory without verifying that the target path is not a symbolic link. If an attacker controls a shell-enabled customer account and can modify files inside the assigned home directory, the attacker can replace `~/.ssh/authorized_keys` with a symlink to `/root/.ssh/authorized_keys`. When Froxlor&#39;s privileged cron task later synchronizes SSH keys, it appends the attacker-supplied key into root&#39;s authorized key file, resulting in root SSH access. Version 2.3.7 contains a patch.</p> https://cve.radiocsirt.org/vuln/cve-2026-41236