CVE-2026-12080— Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys
Possible ATT&CK Techniques 3AI
T1105 · Ingress Tool Transfer T1068 · Exploitation for Privilege Escalation T1548.002 · Bypass User Account ControlAffected Version Matrix 8
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | any | affected |
| Red Hat | Red Hat Enterprise Linux 6 | any | unaffected |
| Red Hat | Red Hat Enterprise Linux 7 | any | unaffected |
any | unaffected | ||
| Red Hat | Red Hat Enterprise Linux 8 | any | affected |
| Red Hat | Red Hat Enterprise Linux 9 | any | affected |
| Red Hat | Red Hat Enterprise Linux for NVIDIA 26 | any | unknown |
| Red Hat | Red Hat OpenShift Container Platform 4 | any | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-12080
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use (TOCTOU) file-symlink race. Successful exploitation allows the attacker to gain ownership of arbitrary root-owned files or directories, leading to root access. This vulnerability requires an external management layer (e.g., libvirt) to trigger the affected code path.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-61
Source: CVE Program / CVE List V5
Vulnerability Title
QEMU 后置链接漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
qemu是QEMU组织开源的一款虚拟化模拟器。 QEMU存在后置链接漏洞，该漏洞源于guest-ssh-add-authorized-keys命令处理程序中的符号链接操纵问题，可能通过确定性的目录符号链接绕过或TOCTOU文件符号链接竞争条件被利用，导致本地非特权用户获取任意root拥有文件或目录的所有权，从而获得root访问权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - | cpe:/o:redhat:enterprise_linux:10 | |
| Red Hat | Red Hat Enterprise Linux 6 | - | cpe:/o:redhat:enterprise_linux:6 | |
| Red Hat | Red Hat Enterprise Linux 7 | - | cpe:/o:redhat:enterprise_linux:7 | |
| Red Hat | Red Hat Enterprise Linux 7 | - | cpe:/o:redhat:enterprise_linux:7 | |
| Red Hat | Red Hat Enterprise Linux 8 | - | cpe:/o:redhat:enterprise_linux:8 | |
| Red Hat | Red Hat Enterprise Linux 9 | - | cpe:/o:redhat:enterprise_linux:9 | |
| Red Hat | Red Hat Enterprise Linux for NVIDIA 26 | - | cpe:/a:redhat:enterprise_linux_nvidia: | |
| Red Hat | Red Hat OpenShift Container Platform 4 | - | cpe:/a:redhat:openshift:4 |
II. Public POCs for CVE-2026-12080
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-12080
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-12080 (1)
Vendor Advisories for CVE-2026-12080 (2)
Same Patch Batch · Red Hat · 2026-07-20 · 8 CVEs total
| CVE-2026-16242 | 9.4 CRITICAL | Hypershift: konnectivity proxy-server accepts agent connections without validating client |
| CVE-2026-12701 | 9.0 CRITICAL | Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemex |
| CVE-2026-64612 | 7.5 HIGH | Libcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malforme |
| CVE-2026-15813 | 6.5 MEDIUM | Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network pac |
| CVE-2026-16277 | 6.5 MEDIUM | Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() |
| CVE-2026-15588 | 5.3 MEDIUM | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering |
| CVE-2026-16254 | 4.3 MEDIUM | Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk install |
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 10
- CVE-2026-13002
Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap - CVE-2026-58224
Samba: ctdb fails to do integrity checking of received packe - CVE-2026-19617
Libdm: lvm2: libdm: denial of service via uncontrolled recur - CVE-2026-73584
Sblim-sfcb: sblim-sfcb: privileged file corruption and denia - CVE-2026-73583
Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-ma
Same vendor: Red Hat
- CVE-2026-66795
Managedcluster-import-controller: managedcluster-import-cont - CVE-2026-71472
Acm-search-v2-rhel9: search-v2-operator: shell-command and s - CVE-2026-70495
Search-v2-operator: search-v2-operator: cluster-wide imperso - CVE-2026-66792
Multicloud-operators-subscription: multicloud-operators-subs - CVE-2026-15218
Models-as-a-service: red hat openshift ai: maas-api and maas
Same weakness: CWE-61
- CVE-2026-47766
crun follows rootfs /dev symlink while creating default devi - CVE-2026-53802
rsync < 3.5.0 Arbitrary File Read via Symlink Following - CVE-2026-47763
pdm: Project-Local State and Config Writes Follow Symlinks - CVE-2026-54574
`proot-distro install` has a Symlink Escape (Arbitrary Host - CVE-2026-56748
Authenticated RCE via Symlink Following in Cribl Stream Pack
V. Comments for CVE-2026-12080
No comments yet