Akamai Guardicore Platform Agent CVE-2026-34354

Requires local user access to a Linux or macOS endpoint running Guardicore Platform Agent 7.0-7.3.1 or Zero Trust Client 6.0-6.1.5. The attacker must be able to create files and symlinks in the /tmp directory (standard unprivileged capability on UNIX systems) and send IPC messages to the GPA service socket. The TOCTOU race condition requires precise timing to replace the log file with a symlink between the service's file creation check and write operations, making exploitation success probabilistic rather than guaranteed (CVSS AC:H). The gimmelogs command injection vector requires the ability to trigger diagnostic log collection and inject data into the dbstore - typically accessible to local users through agent CLI tools or by manipulating database files. No special GPA configuration settings are required; the vulnerability exists in default agent deployments. Exploitation is limited to platforms where symlink-following semantics apply (Linux/macOS); Windows systems experience only arbitrary file write without privilege escalation via command injection.

Real-world risk is moderate despite the 7.4 CVSS score. The local attack vector (AV:L) significantly constrains exploitation compared to network-based vulnerabilities - an attacker must already have local user access to the endpoint. The high attack complexity (AC:H) reflects the race condition's difficulty: successfully winning the TOCTOU race between file creation and symlink swap requires precise timing and may need multiple attempts. However, the lack of authentication requirements (PR:N) means any unprivileged local account suffices, and no user interaction (UI:N) enables scripted exploitation. The impact is severe (C:H/I:H/A:H) as root access grants full system control. The gimmelogs command injection provides a more reliable secondary path if the race proves difficult. CISA KEV status is negative, indicating no confirmed widespread exploitation. No EPSS score is available, likely because this is a future CVE identifier (2026). The vulnerability affects endpoint security products specifically designed to prevent unauthorized access, creating an ironic security control bypass. Organizations with least-privilege endpoint policies limiting local user accounts face reduced risk; those allowing local admin accounts or shared workstations face higher exposure. Patch prioritization should focus on endpoints where multiple users have local access or where the Guardicore agent protects high-value assets.

A local attacker with standard user credentials on a Linux workstation protected by Guardicore Platform Agent 7.2 executes a race condition exploit script that continuously monitors the /tmp directory for the agent's log file creation. When HandleSaveLogs() creates the log file, the attacker's script immediately replaces it with a symlink to /etc/sudoers. The GPA service, running as root and accepting unauthenticated IPC commands, writes log data to the symlinked path with world-writable permissions, allowing the attacker to modify sudoers and grant themselves passwordless sudo access. Alternatively, the attacker triggers the gimmelogs diagnostic tool and injects shell metacharacters into the dbstore, executing arbitrary commands as root. Public exploit code availability not confirmed at time of analysis.