CVE-2026-4105 | BDVDB-2026-320337 Detail

Description#

A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-03-13Record published in the CVE List.
2. Version 22026-11-06Most recent update recorded in the CVE List.