# CWE-271.

Every Advisory and CVE whose sources give the weakness CWE-271, newest first.

## Records, newest first

- [Kahi has privilege-drop and socket/log permission issues](https://agentprime.io/advisories/GHSA-55f6-4pr5-c7m5.md)
  `GHSA-55f6-4pr5-c7m5`, `GO-2026-5847` · Go `github.com/kahiteam/kahi`: affected `<0.1.0-alpha.9`, fixed in `0.1.0-alpha.9` · No CVSS score · Not analysed yet · Published 30 Jun 2026 · Tags: Broken access control, CWE-271
- [CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE](https://agentprime.io/advisories/GHSA-423p-g724-fr39.md)
  `GHSA-423p-g724-fr39`, `CVE-2026-44477`, `GO-2026-5106` · Go `github.com/cloudnative-pg/cloudnative-pg`: affected `<1.28.3 || >=1.29.0, <1.29.1`, fixed in `1.28.3`, `1.29.1` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 May 2026 · Tags: Privilege escalation, CWE-271, CWE-426
- [Sudo: In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid…](https://agentprime.io/advisories/CVE-2026-35535.md)
  `CVE-2026-35535` · CVE record: Sudo project Sudo · CVSS 7.4 High · Not analysed yet · Published 3 Apr 2026 · Tags: CWE-271, CWE-272
- [Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData](https://agentprime.io/advisories/CVE-2026-25704.md)
  `CVE-2026-25704` · CVE record: pop-os cosmic-greeter · CVSS 5.8 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Race condition, CWE-271
- [Rancher's Azure AD permission changes are not reflected on active sessions](https://agentprime.io/advisories/GHSA-vf6j-6739-78m8.md)
  `GHSA-vf6j-6739-78m8`, `CVE-2023-22648` · Go `github.com/rancher/rancher`: affected `>=2.6.7, <2.6.13 || >=2.7.0, <2.7.4`, fixed in `2.6.13`, `2.7.4` · CVSS 8.0 High · Not analysed yet · Published 3 Mar 2026 · Tags: Privilege escalation, Authentication bypass, CWE-271
- [Nix's privilege dropping to build user broke for macOS](https://agentprime.io/advisories/CVE-2025-53819.md)
  `CVE-2025-53819` · CVE record: NixOS nix · CVSS 7.9 High · Not analysed yet · Published 14 Jul 2025 · Tags: CWE-271
- [Local root exploit via \`logfile_reopen()\` in screen 5.0.0 with setuid-root bit set](https://agentprime.io/advisories/CVE-2025-23395.md)
  `CVE-2025-23395` · CVE record · CVSS 7.3 High · Not analysed yet · Published 26 May 2025 · Tags: CWE-271
- [Kubernetes did not effectively clear service account credentials in k8s.io/kubernetes](https://agentprime.io/advisories/GHSA-gc2p-g4fg-29vh.md)
  `GHSA-gc2p-g4fg-29vh`, `CVE-2019-11243`, `GO-2025-3645` · Go `k8s.io/kubernetes`: affected `>=1.12.0, <1.12.5 || >=1.13.0, <1.13.1`, fixed in `1.12.5`, `1.13.1` · CVSS 3.1 Low · Not analysed yet · Published 5 May 2025 · Tags: CWE-271
- [Unprivileged Stalwart Mail Server user can read files as root](https://agentprime.io/advisories/CVE-2024-35179.md)
  `CVE-2024-35179` · CVE record: stalwartlabs mail-server · CVSS 6.8 Medium · Not analysed yet · Published 15 May 2024 · Tags: CWE-271
- [PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL](https://agentprime.io/advisories/CVE-2024-0985.md)
  `CVE-2024-0985` · CVE record: PostgreSQL · CVSS 8.0 High · Not analysed yet · Published 8 Feb 2024 · Tags: CWE-271
- [Ineffective privileges drop when requesting container network](https://agentprime.io/advisories/GHSA-mmx5-32m4-wxvx.md)
  `GHSA-mmx5-32m4-wxvx`, `CVE-2023-38496`, `GO-2023-1965` · Go `github.com/apptainer/apptainer`: affected `>=1.2.0, <1.2.1`, fixed in `1.2.1` · CVSS 6.1 Medium · Not analysed yet · Published 25 Jul 2023 · Tags: Privilege escalation, CWE-271
- [Synacor Zimbra Collaboration Suite (ZCS): Due to an issue with incorrect sudo permissions…](https://agentprime.io/advisories/CVE-2022-3569.md)
  `CVE-2022-3569` · CVE record: Synacor Zimbra Collaboration Suite (ZCS) · CVSS 7.8 High · Not analysed yet · Published 17 Oct 2022 · Tags: CWE-271
- [kernel: A flaw incorrect umask during file or directory modification in the Linux kernel NFS…](https://agentprime.io/advisories/CVE-2020-35513.md)
  `CVE-2020-35513` · CVE record: kernel · No CVSS score · Not analysed yet · Published 25 Jan 2021 · Tags: CWE-271

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-271>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-271/>. Everything for agents: <https://agentprime.io/llms.txt>.