CVE-2026-41231

HIGH EPSS 33.1%
Published Apr 23, 20262mo ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
High
Find Similar
Published Apr 23, 2026 2mo ago
Last Modified Jun 17, 2026 2w ago

Description

Froxlor is open source server administration software. Prior to version 2.3.6, `DataDump.add()` constructs the export destination path from user-supplied input without passing the `$fixed_homedir` parameter to `FileDir::makeCorrectDir()`, bypassing the symlink validation that was added to all other customer-facing path operations (likely as the fix for CVE-2023-6069). When the ExportCron runs as root, it executes `chown -R` on the resolved symlink target, allowing a customer to take ownership of arbitrary directories on the system. Version 2.3.6 contains an updated fix.

CVSS Details

Base Score
7.5
Exploitability
1.6
Impact
5.9
Vector string
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Network
Attack Complexity High
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
33.1% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-59

Affected Products 1

VendorProductVersionRange
froxlorfroxlor* <2.3.6

References 3

  • github.com https://github.com/froxlor/froxlor/commit/2987b0e8806ef12b532410050ad76d13d673a87d
    Patch
  • github.com https://github.com/froxlor/froxlor/releases/tag/2.3.6
    Release Notes
  • github.com https://github.com/froxlor/froxlor/security/advisories/GHSA-75h4-c557-j89r
    ExploitMitigationVendor Advisory

Remediation

  • github.com https://github.com/froxlor/froxlor/commit/2987b0e8806ef12b532410050ad76d13d673a87d
    Patch