CVE-2026-57203
Description
A flaw was found in Asterisk. The ast_loggrabber utility executes a script directly from the shared, world-writable temporary directory (/tmp). A local attacker with shell access can place a malicious script in this location to achieve privilege escalation and execute arbitrary code when an administrative user runs ast_loggrabber.
Statement
This vulnerability is rated as an Important impact because successful exploitation allows a local unprivileged user to escalate privileges to the level of the administrative account executing the utility. Red Hat does not ship or support Asterisk in Red Hat Enterprise Linux or any other core product offerings, meaning default deployments remain unaffected. Exploitation additionally depends on specific user interaction, requiring an administrator to execute the diagnostic tool while untrusted users hold shell permissions on the same system.
Understanding the Weakness (CWE)
Integrity,Confidentiality,Availability,Access Control
Technical Impact: Gain Privileges or Assume Identity; Execute Unauthorized Code or Commands
There is the potential for arbitrary code execution with privileges of the vulnerable program. If the product uses a search path to locate critical resources such as programs or libraries, then an attacker could modify that search path to point to a malicious program/library, which the targeted product would then execute.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
The program could be redirected to the wrong files, potentially triggering a crash or hang when the targeted file is too large or does not have the expected format.
Confidentiality
Technical Impact: Read Files or Directories
The program could access unauthorized data and send the output of unauthorized files to the attacker.
Other
Technical Impact: Varies by Context
The problem extends to any type of critical resource that the product trusts. For example, the attacker could modify configuration in unexpected ways.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
