Acl Project vulnerabilities
We track 1 vulnerability in Acl Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 29, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Acl Project vulnerabilities
- 7.1 High severity
acl: Improper Link Resolution Before File Access
acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathna