CVE-2026-4105

A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/security/cve/CVE-2026-4105
https://bugzilla.redhat.com/show_bug.cgi?id=2447262
https://github.com/systemd/systemd/security/advisories/GHSA-4h6x-r8vx-3862

Configurations

No configuration.

History

No history.

Information

Published : 2026-03-13 19:55

Updated : 2026-03-16 14:53

NVD link : CVE-2026-4105

Mitre link : CVE-2026-4105

CVE.ORG link : CVE-2026-4105

JSON object : View

Products Affected

No product.

CWE

CWE-284

Improper Access Control

{"id": "CVE-2026-4105", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2026-03-13T19:55:13.673", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-4105", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447262", "source": "secalert@redhat.com"}, {"url": "https://github.com/systemd/systemd/security/advisories/GHSA-4h6x-r8vx-3862", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system."}, {"lang": "es", "value": "Se encontr\u00f3 un defecto en systemd. El servicio systemd-machined contiene una vulnerabilidad de control de acceso impropio debido a la validaci\u00f3n insuficiente del par\u00e1metro class en el m\u00e9todo RegisterMachine de D-Bus (Desktop Bus). Un usuario local sin privilegios puede explotar esto al intentar registrar una m\u00e1quina con un valor de clase espec\u00edfico, lo que puede dejar un objeto de m\u00e1quina utilizable y controlado por el atacante. Esto permite al atacante invocar m\u00e9todos en el objeto privilegiado, lo que lleva a la ejecuci\u00f3n de comandos arbitrarios con privilegios de root en el sistema anfitri\u00f3n."}], "lastModified": "2026-03-16T14:53:46.157", "sourceIdentifier": "secalert@redhat.com"}