CVE-2026-102490

Summary

This flaw allows the local zammad user to escalate privileges to root, enabling full control over the system.

Exploitability

Exploitation is straightforward given the necessary local user access. No preconditions are required other than being logged in as the zammad user.

Blast radius

If exploited, the attacker could gain complete control over the system, leading to potential data loss, system compromise, and further attacks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the latest version of Zammad, ensuring it is patched against this vulnerability. Follow the specific vendor advisory for detailed instructions.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.