CVE-2026-123039
High7.8Quantum Security Gateway: Local privilege escalation to root in the DynamicCLI daemon via local world-writable control sockettitle from the CVE record
The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.
- CVSS
- 7.8v3.1
- EPSS (exploit probability)
- Unavailable
- CISA KEV
- Not listed
EPSS trendFIRST daily scores, last 90 days
Unavailable
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Learn
Why it happened and what stops it
The weakness (CWE)
How attackers use it (ATT&CK)
Typical for this kind of weakness across CISA KEV exploits (CTID), not specific to this CVE.
How it's exploited
What the attacker gets
Controls that mitigate it (NIST SP 800-53)
- SI-3Malicious Code ProtectionSystem and Information Integrity · mitigates 6 of these techniques
- SI-4System MonitoringSystem and Information Integrity · mitigates 6 of these techniques
- AC-2Account ManagementAccess Control · mitigates 5 of these techniques
- AC-6Least PrivilegeAccess Control · mitigates 5 of these techniques
- CA-7Continuous MonitoringSecurity Assessment and Authorization · mitigates 5 of these techniques
- CM-6Configuration SettingsConfiguration Management · mitigates 5 of these techniques