Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2021-4034

Quick assessment

Affected
n/a polkit
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

polkit是一个在类 Unix操作系统中控制系统范围权限的组件。通过定义和审核权限规则，实现不同优先级进程间的通讯。 polkit 的 pkexec application存在缓冲区错误漏洞，攻击者可利用该漏洞通过精心设计环境变量诱导pkexec执行任意代码。成功执行攻击后，如果目标计算机上没有权限的用户拥有管理权限，攻击可能会导致本地权限升级。

AI Predicted 7.8 Difficulty: Easy KEV · Ransomware EPSS 94.34% · P100

Public Exploits 2

ExploitDB · 1 EDB-50689 [local]
Metasploit · 1 cve_2021_4034_pwnkit_lpe_pkexec.rb [exploit]

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 1

VendorProduct Version RangeStatus
n/a polkit all affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2021-4034

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Vulnerability Title
polkit 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
polkit是一个在类 Unix操作系统中控制系统范围权限的组件。通过定义和审核权限规则，实现不同优先级进程间的通讯。 polkit 的 pkexec application存在缓冲区错误漏洞，攻击者可利用该漏洞通过精心设计环境变量诱导pkexec执行任意代码。成功执行攻击后，如果目标计算机上没有权限的用户拥有管理权限，攻击可能会导致本地权限升级。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- polkit all -

II. Public POCs for CVE-2021-4034

# POC Description Source Link Shenlong Link
1 Local Privilege Escalation in polkit's pkexec https://github.com/ryaagard/CVE-2021-4034 POC Details
2 impromptu pwn chal https://github.com/lourkeur/cve-2021-4034-playground POC Details
3 CVE-2021-4034 1day https://github.com/berdav/CVE-2021-4034 POC Details
4 None https://github.com/clubby789/CVE-2021-4034 POC Details
5 None https://github.com/gbrsh/CVE-2021-4034 POC Details
6 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034) https://github.com/arthepsy/CVE-2021-4034 POC Details
7 Bash implementation of CVE-2021-4034 https://github.com/JohnHammond/CVE-2021-4034 POC Details
8 CVE-2021-4034 🎧 https://github.com/Audiobahn/CVE-2021-4034 POC Details
9 PoC for CVE-2021-4034 dubbed pwnkit https://github.com/dzonerzy/poc-cve-2021-4034 POC Details
10 PoC for CVE-2021-4034 https://github.com/nikaiw/CVE-2021-4034 POC Details
11 CVE-2021-4034: Local Privilege Escalation in polkit's pkexec proof of concept https://github.com/mebeim/CVE-2021-4034 POC Details
12 Exploit for CVE-2021-4034 https://github.com/Ayrx/CVE-2021-4034 POC Details
13 None https://github.com/Y3A/CVE-2021-4034 POC Details
14 A Golang implementation of clubby789's implementation of CVE-2021-4034 https://github.com/An00bRektn/CVE-2021-4034 POC Details
15 None https://github.com/ayypril/CVE-2021-4034 POC Details
16 None https://github.com/wongwaituck/CVE-2021-4034 POC Details
17 my PoC https://github.com/0x05a/my-cve-2021-4034-poc POC Details
18 polkit pkexec Local Privilege Vulnerability to Add custom commands https://github.com/zhzyker/CVE-2021-4034 POC Details
19 None https://github.com/J0hnbX/CVE-2021-4034-new POC Details
20 Proof of Concept for CVE-2021-4034 Polkit Privilege Escalation https://github.com/Immersive-Labs-Sec/CVE-2021-4034 POC Details
21 A python3 and bash PoC for CVE-2021-4034 by Kim Schulz https://github.com/kimusan/pkwner POC Details
22 Just a sh script file to CVE-2021-4034 https://github.com/N1et/CVE-2021-4034 POC Details
23 Dirty PoC for CVE-2021-4034 (Pwnkit) https://github.com/Nero22k/CVE-2021-4034 POC Details
24 A stupid poc for CVE-2021-4034 https://github.com/LukeGix/CVE-2021-4034 POC Details
25 None https://github.com/aus-mate/CVE-2021-4034-POC POC Details
26 CVE-2021-4034 POC and Docker and Analysis write up https://github.com/chenaotian/CVE-2021-4034 POC Details
27 Pseudopatch for CVE-2021-4034 https://github.com/moldabekov/CVE-2021-4034 POC Details
28 None https://github.com/jostmart/-CVE-2021-4034 POC Details
29 PoC for the CVE-2021-4034 vulnerability, affecting polkit < 0.120. https://github.com/c3l3si4n/pwnkit POC Details
30 None https://github.com/crypticdante/CVE-2021-4034 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-4034

请登录查看更多情报信息。

Vendor Advisories for CVE-2021-4034 (4)

Exploits & Public PoCs for CVE-2021-4034 (1)

Security Blog Posts for CVE-2021-4034 (1)

Other References for CVE-2021-4034 (3)

Same Patch Batch · n/a · 2022-01-28 · 154 CVEs total

CVE-2021-23484 9.8 CRITICAL Arbitrary File Write via Archive Extraction (Zip Slip)
CVE-2021-44463 8.1 HIGH Emerson DeltaV Uncontrolled Search Path Element
CVE-2022-22992 7.8 HIGH Command Injection Remote Code Execution vulnerability on Western Digital My Cloud devices.
CVE-2021-23558 7.3 HIGH Prototype Pollution
CVE-2021-31567 6.8 MEDIUM WordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnera
CVE-2022-22791 6.6 MEDIUM SYNEL - eharmony Authenticated Blind & Stored XSS
CVE-2021-23863 6.1 MEDIUM Bosch Video Security 跨站脚本漏洞
CVE-2022-21719 6.1 MEDIUM Reflected XSS using reload button in GLPI
CVE-2021-26264 6.1 MEDIUM Emerson DeltaV Missing Authentication for Critical Function
CVE-2022-21721 5.9 MEDIUM DOS Vulnerability in next.js
CVE-2021-23760 5.6 MEDIUM Prototype Pollution
CVE-2022-22790 5.6 MEDIUM SYNEL - eharmony Directory Traversal
CVE-2022-21720 4.9 MEDIUM SQL injection using custom CSS administration form in GLPI
CVE-2022-23979 4.8 MEDIUM WordPress Ultimate Reviews plugin <= 3.0.15 - Authenticated Stored Cross-Site Scripting (X
CVE-2022-23599 4.3 MEDIUM Cross-site Scripting and Open Redirect in Products.ATContentTypes
CVE-2021-40340 3.7 LOW OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product
CVE-2021-40338 3.7 LOW OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product
CVE-2021-40339 3.7 LOW OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product
CVE-2021-44373 Reolink Rlc-410W 输入验证错误漏洞
CVE-2021-44374 Reolink Rlc-410W 输入验证错误漏洞

Showing top 20 of 154 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: polkit
Same vendor: n/a
Same weakness: CWE-787

V. Comments for CVE-2021-4034

Anonymous User
2026-01-15 06:09:59

Zaproxy alias impedit expedita quisquam pariatur exercitationem. Nemo rerum eveniet dolores rem quia dignissimos.

Anonymous User
2026-10-09 13:38:28

На этом сайте можно почерпнуть нужную информацию. https://abarmakov.ru/

Leave a comment