CVE-2026-123039
HIGH
NVD
CVSS Score
7.8
Severity
HIGH
Published
Nov 12, 2026
Vendor
unknown
Description
The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.