Description
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user
Published: 2026-08-10
Score: 6.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw in systemd-homed arises from a missing verification of the home‑record signature during user authentication. This oversight allows a local, logged‑in homed‑managed user to add arbitrary system groups to their own account, effectively elevating privilege. The issue is classified as a broken access control weakness (CWE‑269) and a missing signature check (CWE‑347).

Affected Systems

The vulnerability affects all deployments of systemd that include the homed component. Any system running systemd-homed is potentially susceptible, regardless of the active operating system distribution, because no specific version numbers are currently disclosed.

Risk and Exploitability

The CVSS score of 6.7 indicates a moderate severity, and the EPSS score is not available. The flaw is not listed in the CISA KEV catalog. The attack vector is local; an attacker must be logged in to the target machine to exploit this issue. Successful exploitation would grant the user additional system group memberships, increasing their privileges on the system.

Generated by OpenCVE AI on August 10, 2026 at 17:59 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the most recent systemd update that resolves the missing home‑record signature verification issue.
  • If an immediate update is not possible, temporarily restrict the ability of local homed users to add system groups until the fix is applied.
  • Verify that the system operates with the latest secure configuration for systemd-homed, ensuring that authentication paths enforce signature checks.

Generated by OpenCVE AI on August 10, 2026 at 17:59 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-8626-1 systemd vulnerabilities
History

Tue, 11 Aug 2026 14:15:00 +0000

Type Values Removed Values Added
First Time appeared Systemd
Systemd systemd
Vendors & Products Systemd
Systemd systemd

Mon, 10 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-269
CWE-347
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 10 Aug 2026 13:45:00 +0000

Type Values Removed Values Added
Description systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user
Title systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

Systemd Systemd
cve-icon MITRE

Status: PUBLISHED

Assigner: systemd

Published:

Updated: 2026-08-10T15:49:58.525Z

Reserved: 2026-07-23T09:28:44.818Z

Link: CVE-2026-16742

cve-icon Vulnrichment

Updated: 2026-08-10T15:48:55.571Z

cve-icon NVD

Status : Received

Published: 2026-08-10T14:17:21.277

Modified: 2026-08-10T16:19:29.157

Link: CVE-2026-16742

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-11T14:00:14Z

Weaknesses
  • CWE-269

    Improper Privilege Management

  • CWE-347

    Improper Verification of Cryptographic Signature