EUVD-2026-26681Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
AGL app-framework-binder (afb-daemon) through v19.90.0 contains a privilege escalation vulnerability in the supervision Do command. The on_supervision_call function in src/afb-supervision.c explicitly nullifies the request credentials by calling afb_context_change_cred(&xreq->context, NULL) before dispatching an attacker-controlled API call via xapi->itf->call(xapi->closure, xreq). The NULL propagation chain through afb-context.c:110 (context->credentials = afb_cred_addref(NULL)) and afb-cred.c:163 (returns NULL when cred is NULL) confirms that credentials are zeroed before the target API executes. The attacker controls both api and verb parameters via JSON input, allowing execution of any registered API with a NULL credential context. APIs that rely on context->credentials for authorization decisions may fail open when receiving NULL credentials, enabling privilege escalation. This vulnerability was introduced in commit abbb4599f0b921c6f434b6bd02bcfb277eecf745 on 2018-02-14.
AnalysisAI
Local privilege escalation in Automotive Grade Linux (AGL) app-framework-binder (afb-daemon) through v19.90.0 allows authenticated users to execute arbitrary registered APIs with nullified credentials. The supervision Do command in src/afb-supervision.c explicitly zeroes request credentials before dispatching attacker-controlled API calls, causing authorization checks to fail open when encountering NULL credential contexts. This enables low-privileged users to bypass access controls and execute privileged operations. EPSS data not available; no public exploit code or active exploitation confirmed at time of analysis.
Technical ContextAI
The app-framework-binder (afb-daemon) is a core component of Automotive Grade Linux providing application framework services and API brokerage. The vulnerability resides in the supervision command handler where the on_supervision_call function in src/afb-supervision.c calls afb_context_change_cred(&xreq->context, NULL) before invoking xapi->itf->call(xapi->closure, xreq). This NULL credential propagates through afb-context.c line 110 where context->credentials = afb_cred_addref(NULL) and afb-cred.c line 163 which returns NULL when given NULL input. The attacker supplies both 'api' and 'verb' parameters via JSON, controlling which registered API endpoint executes with the nullified credential context. APIs implementing security checks that compare against context->credentials without NULL-safety may interpret NULL as a privileged or default-allow state rather than rejecting the request. The flaw was introduced in commit abbb4599f0b921c6f434b6bd02bcfb277eecf745 on February 14, 2018, indicating multi-year exposure in deployed automotive systems.
RemediationAI
Upgrade to app-framework-binder version 19.90.1 or later once available, as no specific patched version is confirmed in available advisories at time of analysis. Monitor the AGL Gerrit repository at https://gerrit.automotivelinux.org/gerrit/src/app-framework-binder for security commits addressing CVE-2026-37525. Review the technical analysis at https://gist.github.com/sgInnora/8526eedcfd826d05ef1fc45d8f405643 for exploitation details to inform compensating controls. As immediate mitigation, disable or restrict access to the supervision Do command interface if not operationally required - modify afb-daemon configuration to prevent untrusted local users from invoking supervision APIs, though this may impact legitimate management functionality. Implement mandatory access control policies (AppArmor, SELinux) to constrain afb-daemon process capabilities and limit damage from successful privilege escalation, accepting the trade-off of increased policy maintenance overhead. Audit all registered APIs for NULL credential handling - ensure authorization logic explicitly rejects NULL credential contexts rather than treating them as privileged, though this requires code changes across potentially numerous API implementations. For automotive deployments, implement network segmentation to isolate infotainment systems from safety-critical vehicle networks, reducing the blast radius of local privilege escalation exploits.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today