EIP-2026-102797

PRE-CVE

Calibre E-Book Reader - Race Condition Privilege Escalation

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102797. PoCs published by zx2c4.

AI-analyzed exploit summary This exploit leverages a race condition in Calibre's mount helper to achieve local privilege escalation by manipulating mount points and symlinks to overwrite /etc/pam.d/common-auth, allowing passwordless root access.

Description

Calibre E-Book Reader - Race Condition Privilege Escalation

Exploits (1)

exploitdb WORKING POC VERIFIED

by zx2c4 · bashlocallinux

https://www.exploit-db.com/exploits/18072

View Code ZIP pw:eip

This exploit leverages a race condition in Calibre's mount helper to achieve local privilege escalation by manipulating mount points and symlinks to overwrite /etc/pam.d/common-auth, allowing passwordless root access.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Racy

Target: Calibre (specific version not specified)

No auth needed

Prerequisites: Local access to the system · Calibre installed with vulnerable mount helper · Presence of /sbin/mkfs.ntfs

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1548.002 - Bypass User Account Control

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026