CVE-2026-104474 | CVSS: 6.7 | 严重级别: MEDIUM
OpenLiteSpeed before 1.9.3 contains a local privilege escalation vulnerability in admin/misc/lsup.sh that runs unverified update packages from a nobody-writable directory as root. Attackers controlling the nobody web process can replace the package in /usr/local/lsws/autoupdate/ before extraction, so its install.sh runs as root on the next update.
参考链接:
• https://github.com/litespeedtech/openlitespeed/blob/v1.9.2/dist/admin/misc/lsup.
• https://github.com/litespeedtech/openlitespeed/commit/468523ce84388cea9ba6633c26
• https://openlitespeed.org/release-log/version-1-9-x/
📌 数据来源: NVD 官方
⚠️ 合规声明: 本文内容仅用于网络安全合规学习、科研与授权测试用途。严禁用于任何未授权行为,违者自行承担全部法律责任。