Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) differs from their UID, either because the account was created with authd prior to version 0.5.4 or because the primary group was manually changed via the `authctl group set-gid` command, and the user's identity provider record is updated, authd incorrectly resets the user's primary group ID to their UID upon next login. This causes newly created files and directories to be owned by the wrong group, causing denial of service issues, and potentially granting unintended access to other local users and allowing local privilege escalation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-27 | 2 | Disclosure2 |
| 2026-05-02 | 1 | Patch1 |
| 2026-05-06 | 1 | Disclosure1 |
🔴 authd, Local Privilege Escalation, #CVE-2026-6970 (High) https://dailycve.com/authd-local-privilege-escalation-cve-2026-6970-high/
Post summary
The post announces a high‑severity local privilege escalation flaw in authd (CVE-2026-6970), offering only basic vulnerability details with no PoC, exploit, patch, or active‑exploitation evidence.
Authd CVE-2026-6970: Local privilege escalation. GIDs reset to UIDs on login, breaking access and opening doors. Patch to 0.6.4 now. #LPE #LinuxSec #authd #devops #devsecops #developers Info: https://www.valtersit.com/cve/2026/04/cve-2026-6970/
Post summary
The post announces a local privilege escalation flaw (CVE‑2026‑6970) and notes a patch (version 0.6.4) is available, but offers no exploit code or evidence of active attacks.
CVE-2026-6970 authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) dif… https://www.cve.org/CVERecord?id=CVE-2026-6970
Post summary
CVE-2026-6970 is disclosed as a logic error in group ID handling that allows local privilege escalation, with no exploit code, patch, or active exploitation mentioned.
CVE-2026-6970 Local Privilege Escalation via Primary Group ID Logic Error in authd Prior to 0.6.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6970
Post summary
The text announces CVE-2026-6970, describing a local privilege escalation flaw in authd before version 0.6.4, and implies a patch in version 0.6.4.