What is the CVSS score of CVE-2026-58302?

CVE-2026-58302 has a CVSS 3.1 base score of 8.4 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linuxcnc are affected by CVE-2026-58302?

LinuxCNC (uspace) versions before 2.9.9 contain a local privilege escalation vulnerability enabling any unprivileged user to execute code as root; no public exploit identified at time of analysis.. A patch is available.

How to fix or mitigate CVE-2026-58302?

Within 24 hours: inventory all systems running linuxcnc-uspace prior to version 2.9.9; restrict local shell access to trusted personnel only. Within 7 days: upgrade linuxcnc-uspace to version 2.9.9 on development and staging environments; validate system functionality before production release. Within 30 days: deploy version 2.9.9 across all production systems; confirm no instances remain below the patched version.

Linuxcnc CVE-2026-58302

EUVD-2026-40241 HIGH

Path Traversal (CWE-22)

2026-06-30 mitre

GHSA-h3vh-9phr-5gjm

Privilege Escalation Path Traversal Linuxcnc

8.4

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

8.4 HIGH

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jun 30, 2026 - 03:01 EUVD

Analysis Generated

Jun 30, 2026 - 02:11 vuln.today

CVE Published

Jun 30, 2026 - 01:09 cve.org

HIGH 8.4

DescriptionCVE.org

rtapi_app in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is installed SUID root and loads shared library modules via dlopen() by using a user-supplied module name. Insufficient validation of the module name allows path traversal, enabling an unprivileged local user to load an arbitrary shared library. Because the process retains elevated privileges during module loading, this results in local privilege escalation to root.

AnalysisAI

Local privilege escalation to root in LinuxCNC (linuxcnc-uspace) before 2.9.9 lets any unprivileged local user execute arbitrary code as root. The SUID-root rtapi_app helper accepts a user-supplied module name and passes it to dlopen() without sufficient validation, so path traversal lets an attacker load an arbitrary attacker-controlled shared library while the process is still privileged. No public exploit identified at time of analysis and the issue is not in CISA KEV; an upstream fix is available in version 2.9.9.