CVE-2026-23740
Asterisk vulnerable to potential privilege escalation
- State
- Published
- Severity
- 0.0 None
- Published
- Feb 6, 2026
- Updated
- Feb 6, 2026
- Reserved
- Jan 15, 2026
Description
Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when ast_coredumper writes its gdb init and output files to a directory that is world-writable (for example /tmp), an attacker with write permission(which is all users on a linux system) to that directory can cause root to execute arbitrary commands or overwrite arbitrary files by controlling the gdb init file and output paths. This issue has been patched in versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 0.0 None | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N | GitHub_M |
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-427 Uncontrolled Search Path Element
Affected Products
| Product | Versions |
|---|---|
asteriskasterisk |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.