Report: CVE-2026-4105 - Systemd Machined Improper Access Control Vulnerability

Report: CVE-2026-4105 - Systemd Machined Improper Access Control Vulnerability

CVE ID :CVE-2026-4105 Published : March 13, 2026, 10:23 a.m. | 1 hour, 58 minutes ago Description :A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system. Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
March 13, 2026
Attack Vector: local