Findings

CVE-2026-44933

attempts to the plugin to the , this root is frequently (the system root) in standard configurations or when using .

Published May 20, 2026 · updated Jul 24, 2026

attempts to the plugin to the , this root is frequently (the system root) in standard configurations or when using . If the chroot target is , it is a no-op, allowing the traversed path to execute host binaries (like ) with root privileges.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 20, 2026 · NIST NVD

    Detected

    attempts to the plugin to the , this root is frequently (the system root) in standard configurations or when using . If the chroot target is , it is a no-op, allowing the traversed path to execute host binaries (like ) with root privileges.

  2. Jul 24, 2026 · NIST NVD

    Updated

    attempts to the plugin to the , this root is frequently (the system root) in standard configurations or when using . If the chroot target is , it is a no-op, allowing the traversed path to execute host binaries (like ) with root privileges.

Sources

  • CVE.orgVulnerability recordCVE-2026-44933

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-44933

    attempts to the plugin to the , this root is frequently (the system root) in standard configurations or when using . If the chroot target is , it is a no-op, allowing the traversed path to execute host binaries (like `/bin/b

    nvd.nist.gov

References