Exploitation Summary
EIP tracks 2 public exploits for CVE-2026-25828. PoCs published by XiaomingX, cardosource.
AI-analyzed exploit summary The repository contains a functional PoC for CVE-2026-25828, demonstrating a command injection vulnerability in grub-btrfs's initramfs hook. The exploit leverages unsanitized input from the kernel command line to execute arbitrary commands as root during boot.
Description
grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection because it does not sanitize the $root parameter to resolve_device(). NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific implementation details within resolve_device."
Exploits (2)
The repository contains a functional PoC for CVE-2026-25828, demonstrating a command injection vulnerability in grub-btrfs's initramfs hook. The exploit leverages unsanitized input from the kernel command line to execute arbitrary commands as root during boot.
This repository contains a working PoC for CVE-2026-25828, a command injection vulnerability in the grub-btrfs package for Arch Linux. The exploit leverages unsanitized input in the $root kernel parameter to execute arbitrary commands as root during the boot process.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N