CVE-2019-3827
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that...
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
- Record
CVE-2019-3827- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-02
EUVDEUVD-2019-13449
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
- Record
EUVD-2019-13449- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4782-6x7j-q79q
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that...
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
- Record
GHSA-4782-6x7j-q79q- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-02
NVD
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
- Record
CVE-2019-3827- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 3.3 Low
AV:L/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-863
- Updated
- 2026-11-02
OSV
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
- Record
CVE-2019-3827- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-3827
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
- Record
DEBIAN-CVE-2019-3827- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVRHSA-2019:1517
Red Hat Security Advisory: gvfs security update
- Record
RHSA-2019:1517- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:2145
Red Hat Security Advisory: gvfs security and bug fix update
- Record
RHSA-2019:2145- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-3827
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
- Record
UBUNTU-CVE-2019-3827- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 6.3 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVMGASA-2019-0080 No score
Updated gvfs packages fix security vulnerability
The backend currently allows to access and modify files without prompting for password if any polkit authentication agent isn't available. This affects only users which belong to wheel group (i.e. those who are already allowed to use sudo). It doesn't allow privilege escalation for users, who don't belong to that group (CVE-2019-3827).
- Record
MGASA-2019-0080- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:0261-1 No score
Security update for gvfs
This update for gvfs fixes the following issues:
Security vulnerability fixed:
- CVE-2019-3827: Fixed an issue whereby an unprivileged user was not prompted to give a password when acessing root owned files. (bsc#1125084)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:0261-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10838-1 No score
gvfs-1.48.1-1.3 on GA media
These are all security issues fixed in the gvfs-1.48.1-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10838-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0438-1 No score
Security update for gvfs
This update for gvfs fixes the following issues:
Security vulnerability fixed:
- CVE-2019-3827: Fixed an issue whereby an unprivileged user was not prompted to give a password when acessing root owned files. (bsc#1125084)
- Record
SUSE-SU-2019:0438-1- Updated
- 2026-11-02
OSVUSN-3888-1 No score
gvfs vulnerability
It was discovered that GVfs incorrectly handled certain inputs. An attacker could possibly use this issue to access sensitive information.
- Record
USN-3888-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gvfsDebian:12 |
before 1.38.1-3 | 1.38.1-3 |
gvfsDebian:13 |
before 1.38.1-3 | 1.38.1-3 |
gvfsDebian:14 |
before 1.38.1-3 | 1.38.1-3 |
gvfsMageia:6 |
before 1.32.1-1.1.mga6 | 1.32.1-1.1.mga6 |
gvfsRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-afcRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-afc-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-afpRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-afp-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-archiveRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
Show 84 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gvfs-archive-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-clientRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-client-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-develRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-fuseRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-fuse-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-goaRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-goa-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-gphoto2Red Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-gphoto2-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-mtpRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-mtp-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-smbRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-smb-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfsRed Hat:enterprise_linux:8::crb |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-afc-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-afp-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-archive-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-client-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-fuse-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-goa-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-gphoto2-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-mtp-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfs-smb-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.36.2-2.el8_0.1 | 0:1.36.2-2.el8_0.1 |
gvfsRed Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-afcRed Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-afpRed Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-archiveRed Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-clientRed Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-fuseRed Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-goaRed Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-gphoto2Red Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-mtpRed Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-smbRed Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-develRed Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-testsRed Hat:enterprise_linux:7::client |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfsRed Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-afcRed Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-afpRed Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-archiveRed Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-clientRed Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-develRed Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-fuseRed Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-goaRed Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-gphoto2Red Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-mtpRed Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-smbRed Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-testsRed Hat:enterprise_linux:7::computenode |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfsRed Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-afcRed Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-afpRed Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-archiveRed Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-clientRed Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-develRed Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-fuseRed Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-goaRed Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-gphoto2Red Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-mtpRed Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-smbRed Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-testsRed Hat:enterprise_linux:7::server |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfsRed Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-afcRed Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-afpRed Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-archiveRed Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-clientRed Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-develRed Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-fuseRed Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-goaRed Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-gphoto2Red Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-mtpRed Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-smbRed Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfs-testsRed Hat:enterprise_linux:7::workstation |
before 0:1.36.2-3.el7 | 0:1.36.2-3.el7 |
gvfsSUSE:Linux Enterprise Module for Desktop Applications 15 |
before 1.34.2.1-4.6.1 | 1.34.2.1-4.6.1 |
gvfsUbuntu:18.04:LTS |
before 1.36.1-0ubuntu1.3, plus listed versions 1.34.1-1ubuntu11.34.1-1ubuntu31.34.1-1ubuntu41.34.1-2ubuntu21.35.91-1ubuntu1 Show 5 moreShow less1.35.91-1ubuntu21.36.0-1ubuntu11.36.1-0ubuntu11.36.1-0ubuntu1.11.36.1-0ubuntu1.2 |
1.36.1-0ubuntu1.3 |
gvfsopenSUSE:Leap 15.0 |
before 1.34.2.1-lp150.3.6.1 | 1.34.2.1-lp150.3.6.1 |
gvfsopenSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 1.48.1-1.3 | 1.48.1-1.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-3827 is a high vulnerability (CVSS 7.0) in [unknown] Gvfs, published February 11, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in gvfs 1.38.1-3.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3827
gitlab.gnome.org/GNOME/gvfs/merge_requests/31
access.redhat.com/errata/RHSA-2019:1517
nvd.nist.gov/vuln/detail/CVE-2019-3827
github.com/advisories/GHSA-4782-6x7j-q79q
Show 25 moreShow less
security-tracker.debian.org/tracker/CVE-2019-3827
advisories.mageia.org/MGASA-2019-0080.html
bugs.mageia.org/show_bug.cgi?id=24215
lists.fedoraproject.org/archives/list/[email protected]/thread/Y43CRGATQPYWH2UXO6ZS7PYPCSZGTGED
usn.ubuntu.com/3888-1
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1517.json
cve.org/CVERecord?id=CVE-2019-3827
suse.com/support/update/announcement/2019/suse-su-20190438-1
bugzilla.suse.com/1125084
ubuntu.com/security/CVE-2019-3827
lists.opensuse.org/archives/list/[email protected]/thread/EHTJ6QR4Z76JZTPUEXBA4LH7I54YMIFE