EIP-2026-103807
PRE-CVEPlatform Load Sharing Facility 4/5 - 'LSF_ENVDIR' Local Command Execution
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103807. PoCs published by Tomasz Grabowski.
AI-analyzed exploit summary This exploit leverages improper handling of environment variables in LSF 5.1's 'lsadmin' binary to execute arbitrary code with elevated privileges. It sets LSF_SERVERDIR to the current directory, allowing the attacker to execute a malicious binary ('lim') as root, which then reads and outputs the first line of /etc/shadow.
Description
Platform Load Sharing Facility 4/5 - 'LSF_ENVDIR' Local Command Execution
Exploits (1)
This exploit leverages improper handling of environment variables in LSF 5.1's 'lsadmin' binary to execute arbitrary code with elevated privileges. It sets LSF_SERVERDIR to the current directory, allowing the attacker to execute a malicious binary ('lim') as root, which then reads and outputs the first line of /etc/shadow.