CVE-2026-123962
HIGH
NVD
CVSS Score
8.4
Severity
HIGH
Published
Nov 06, 2026
Vendor
unknown
Description
In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories.