CVE-2024-48991

Summary

CVE-2024-48991 is a newly discovered vulnerability in Qualys' needrestart software. Prior to version 3.8, this tool is susceptible to a race condition, which enables local attackers to execute arbitrary code as root. They can manipulate the software into believing that their fake Python interpreter is the legitimate one, thereby bypassing the system's real Python interpreter. This security flaw poses a significant risk and demands immediate attention from users to update their needrestart software to the latest version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.