LACT implements Polkit authentication that relies on UnixProcessSubject and Peer PID checks to authorize privileged operations. Attackers can manipulate these checks, causing the policy engine to grant authorization without proper validation, effectively bypassing authentication. This flaw may let a local user gain elevated privileges or access resources they should not be able to control.

The vulnerability affects the LACT project by ilya-zlobintsev up to version 0.10.0. The issue was addressed in commit d0478fe42c2219454e272f96b1cbd29ab37ee566, which updates the authentication logic. Any deployment that has not applied this patch or is running an older release is vulnerable.

The CVSS score of 7.3 indicates a high severity. EPSS data are not available, but the lack of a CISA KEV listing suggests no widespread exploitation is currently recorded. Attackers likely require local access to the system to exploit the Polkit authentication bypass, which could enable privilege escalation or unauthorized execution within processes controlled by LACT. The vulnerability stems from CWE-290, which highlights that authentication mechanisms are incomplete or improperly implemented.