{"id":"CVE-2026-123962","aliases":["DEBIAN-CVE-2026-123962","EUVD-2026-118380","GHSA-6wcf-xp9g-wcfj","UBUNTU-CVE-2026-123962"],"status":"published","title":"In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack...","description":"In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories.","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00194,"percentile":0.09192,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-61"],"published":"2026-11-06T00:00:00Z","modified":"2026-11-07T01:46:33Z","fixes":[{"ecosystem":"Debian:14","package":"freedombox","fixed_in":["26.15"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"freedombox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["23.10","23.11","23.12","23.12~bpo12+1","23.13","23.13~bpo12+1","23.14","23.14~bpo12+1","23.15","23.15~bpo12+1","23.16","23.16~bpo12+1","23.17","23.17~bpo12+1","23.18","23.18~bpo12+1","23.19","23.19~bpo12+1","23.20","23.20~bpo12+1","23.21","23.21~bpo12+1","23.6.2","23.6.2+deb12u1","23.7","23.8","23.9","24.1","24.10","24.10~bpo12+1","24.11","24.11~bpo12+1","24.12","24.12~bpo12+1","24.13","24.13~bpo12+1","24.14","24.14~bpo12+1","24.15","24.15~bpo12+1","24.16","24.16~bpo12+1","24.17","24.17~bpo12+1","24.18","24.18~bpo12+1","24.19","24.1~bpo12+1","24.2","24.20","24.20.1","24.20.1~bpo12+1","24.21","24.21~bpo12+1","24.22","24.22~bpo12+1","24.23","24.23~bpo12+1","24.24","24.24~bpo12+1","24.25","24.25~bpo12+1","24.26","24.26.1","24.26.1~bpo12+1","24.2~bpo12+1","24.3","24.3~bpo12+1","24.4","24.4~bpo12+1","24.5","24.5~bpo12+1","24.6","24.7","24.7~bpo12+1","24.8","24.8~bpo12+1","24.9","24.9~bpo12+1","25.1","25.10","25.10~bpo13+1","25.11","25.11~bpo13+1","25.12","25.12~bpo13+1","25.13","25.13.1","25.13.1~bpo13+1","25.13~bpo13+1","25.14","25.14~bpo13+1","25.15","25.15~bpo13+1","25.16","25.16~bpo13+1","25.17","25.17.1","25.17.1~bpo13+1","25.17~bpo13+1","25.1~bpo12+1","25.2","25.3","25.3.1","25.3.1~bpo12+1","25.4","25.4.1","25.4.1~bpo12+1","25.5","25.5~bpo12+1","25.6","25.6~bpo12+1","25.7","25.7~bpo12+1","25.8","25.8~bpo12+1","25.9","25.9.1","25.9.1~bpo12+1","25.9.2","25.9.2~bpo12+1","25.9.3","25.9.3~bpo12+1","25.9.3~bpo12+2","25.9.4","25.9~bpo12+1","26.1","26.10","26.10~bpo13+1","26.11","26.11.1","26.11.1~bpo13+1","26.12","26.12~bpo13+1","26.13","26.13~bpo13+1","26.14","26.14~bpo13+1","26.15","26.15~bpo13+1","26.1~bpo13+1","26.2","26.2~bpo13+1","26.3","26.4","26.4.1","26.4.2","26.4.2~bpo13+1","26.4~bpo13+1","26.5","26.5.1","26.5.1~bpo13+1","26.6","26.6~bpo13+1","26.7","26.7.1","26.7.1~bpo13+1","26.8","26.8~bpo13+1","26.9","26.9.1","26.9.1~bpo13+1"]},{"source":"osv","ecosystem":"Debian:13","package":"freedombox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.10","25.10~bpo13+1","25.11","25.11~bpo13+1","25.12","25.12~bpo13+1","25.13","25.13.1","25.13.1~bpo13+1","25.13~bpo13+1","25.14","25.14~bpo13+1","25.15","25.15~bpo13+1","25.16","25.16~bpo13+1","25.17","25.17.1","25.17.1~bpo13+1","25.17~bpo13+1","25.9.3","25.9.3+deb13u1","25.9.4","26.1","26.10","26.10~bpo13+1","26.11","26.11.1","26.11.1~bpo13+1","26.12","26.12~bpo13+1","26.13","26.13~bpo13+1","26.14","26.14~bpo13+1","26.15","26.15~bpo13+1","26.1~bpo13+1","26.2","26.2~bpo13+1","26.3","26.4","26.4.1","26.4.2","26.4.2~bpo13+1","26.4~bpo13+1","26.5","26.5.1","26.5.1~bpo13+1","26.6","26.6~bpo13+1","26.7","26.7.1","26.7.1~bpo13+1","26.8","26.8~bpo13+1","26.9","26.9.1","26.9.1~bpo13+1"]},{"source":"osv","ecosystem":"Debian:14","package":"freedombox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.15"}]}],"versions":["25.10","25.10~bpo13+1","25.11","25.11~bpo13+1","25.12","25.12~bpo13+1","25.13","25.13.1","25.13.1~bpo13+1","25.13~bpo13+1","25.14","25.14~bpo13+1","25.15","25.15~bpo13+1","25.16","25.16~bpo13+1","25.17","25.17.1","25.17.1~bpo13+1","25.17~bpo13+1","25.9.3","25.9.4","26.1","26.10","26.10~bpo13+1","26.11","26.11.1","26.11.1~bpo13+1","26.12","26.12~bpo13+1","26.13","26.13~bpo13+1","26.14","26.14~bpo13+1","26.15~bpo13+1","26.1~bpo13+1","26.2","26.2~bpo13+1","26.3","26.4","26.4.1","26.4.2","26.4.2~bpo13+1","26.4~bpo13+1","26.5","26.5.1","26.5.1~bpo13+1","26.6","26.6~bpo13+1","26.7","26.7.1","26.7.1~bpo13+1","26.8","26.8~bpo13+1","26.9","26.9.1","26.9.1~bpo13+1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freedombox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.5build1","21.12","21.13","21.14","21.14.1","21.15","21.16","22.1","22.2","22.3","22.4","22.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"freedombox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["23.15","23.19","24.1","24.2","24.3","24.4","24.5","24.8"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"freedombox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["26.5","26.8","26.9","26.9.1","26.9.1ubuntu1","26.9.1ubuntu2","26.10ubuntu2","26.11.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"freedombox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.9.3","26.4.2ubuntu1","26.5"]}],"products":[{"vendor":"debian","product":"freedombox"}],"references":[{"url":"https://alioth-lists.debian.net/pipermail/freedombox-discuss/2026-November/010041.html","tags":["report"]},{"url":"https://salsa.debian.org/freedombox-team/freedombox/-/commit/351b6a5c9b432f29ecab2a74d5426977bca29188"},{"url":"https://freedombox.org/about/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123962"},{"url":"https://freedombox.org/about"},{"url":"https://github.com/advisories/GHSA-6wcf-xp9g-wcfj"},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-123962","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-123962","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-123962","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-123962","description":"In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories.","status":"published","published":"2026-11-06T17:11:32.996Z","modified":"2026-11-06T21:44:13.497Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-61"],"updated_at":"2026-11-06T22:31:26.655296Z"}],"euvd":[{"id":"EUVD-2026-118380","description":"In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories.","status":"published","published":"2026-11-06T17:11:32Z","modified":"2026-11-06T21:44:13Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-06T21:07:03.301185Z"}],"ghsa":[{"id":"GHSA-6wcf-xp9g-wcfj","title":"In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack...","description":"In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories.","status":"published","published":"2026-11-06T18:35:24Z","modified":"2026-11-06T18:35:32Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-61"],"updated_at":"2026-11-06T19:01:27.658277Z"}],"nvd":[{"id":"CVE-2026-123962","description":"In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories.","status":"published","published":"2026-11-06T17:17:25.483Z","modified":"2026-11-12T22:11:01.153Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-61"],"updated_at":"2026-11-07T00:02:36.552517Z"}],"osv":[{"id":"DEBIAN-CVE-2026-123962","description":"In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories.","status":"published","published":"2026-11-06T17:17:25.483Z","modified":"2026-11-07T05:00:08.701403602Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-07T05:09:09.270904Z"},{"id":"UBUNTU-CVE-2026-123962","description":"[ssh: Read/write authorized keys file using user account privileges]","status":"published","published":"2026-11-06T00:00:00Z","modified":"2026-11-09T12:49:51.567811395Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-09T13:27:42.046613Z"}]}}