CVE-2026-31979 - Vulnerability Analysis

Overview

Himmelblau < 3.1.0 and < 2.3.8 contains a local privilege escalation caused by lack of symlink protections in himmelblaud-tasks daemon writing Kerberos cache files under /tmp, letting local users overwrite arbitrary files, exploit requires local user access.

Severity & Score

Impact

Local users can escalate privileges by overwriting arbitrary files, potentially gaining root access.

Mitigation

Update to versions 3.1.0 or 2.3.8 or later.

References

• https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-44wm-q286-ghq3

Social Media Activity(1 post)

Catalin Cimpanu

@campuscodi

Mar 22, 2026

A vulnerability in a Linux enterprise app can allow attackers root access over devices The issue impacts Himmelblau, an interoperability suite to integrate Linux with Entra ID and Intune networks. https://www.akamai.com/blog/security-research/2026/mar/cve-2026-31979-symlink-root-privilege-escalation-himmelblau

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner