Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-102862. PoCs published by Xiphos Research Ltd.
AI-analyzed exploit summary This exploit abuses a vulnerability in GNU Screen v4.5.0 by overwriting /etc/ld.so.preload to load a malicious shared library, which then sets the SUID bit on a rootshell binary. The exploit leverages the setuid binary 'screen' to escalate privileges to root.
Description
GNU Screen 4.5.0 - Local Privilege Escalation
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Xiphos Research Ltd · bashlocallinux
https://www.exploit-db.com/exploits/41154
This exploit abuses a vulnerability in GNU Screen v4.5.0 by overwriting /etc/ld.so.preload to load a malicious shared library, which then sets the SUID bit on a rootshell binary. The exploit leverages the setuid binary 'screen' to escalate privileges to root.
Classification
Working Poc 100%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target:
GNU Screen v4.5.0
No auth needed
Prerequisites:
GNU Screen v4.5.0 installed · Access to a local user account
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026