{"id":"CVE-2026-113678","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-113678","summary":"Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take ownership of arbitrary host directories…","details":"Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take ownership of arbitrary host directories by abusing the root-run traffic cron. Attackers can replace the goaccess statistics directory in their document root with a symlink, causing chown -R to hand root-owned trees to them and enabling root escalation.","published":"2026-10-20T16:17:12.613","modified":"2026-10-20T16:17:12.727","cvss":{"score":9.9,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":{"url":"https://github.com/froxlor/froxlor/commit/0805a7e16a223d528b51d8cacfaff54217b9d8f8","label":"froxlor/froxlor@0805a7e"},"references":[{"type":"WEB","url":"https://github.com/froxlor/froxlor/blob/2.3.14/lib/Froxlor/Http/Statistics.php#L144-L162"},{"type":"WEB","url":"https://github.com/froxlor/froxlor/commit/0805a7e16a223d528b51d8cacfaff54217b9d8f8"},{"type":"WEB","url":"https://github.com/froxlor/froxlor/releases/tag/2.3.15"},{"type":"WEB","url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-vwjv-x8ff-4cvv"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/froxlor-before-2.3.15-symlink-following-privilege-escalation-via-traffic-cron"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-10-20T16:17:12.727"}}