AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

🔥 This vulnerability is being actively exploited in the wild (CISA Known Exploited Vulnerabilities catalog)

CVE-2015-3246: Red Hat Libuser Race Condition Vulnerability

infovulnerability🔥 Actively Exploited

security

Source: CISA Known Exploited VulnerabilitiesAugust 25, 2026CVE-2015-3246

Summary

Red Hat Libuser contains a race condition vulnerability (a bug where the timing of operations causes unexpected behavior) that allows authenticated local users to corrupt the /etc/passwd file (the system file storing user account information), potentially causing a denial of service (making a system unavailable) or privilege escalation (gaining higher-level access than intended). This vulnerability is actively being exploited by attackers.

Solution / Mitigation

Apply mitigations in accordance with vendor instructions from Red Hat. Follow CISA's BOD 26-04 guidance for prioritizing security updates based on risk. For cloud services, either apply the mitigations or discontinue use of the product if mitigations are unavailable. See Red Hat's advisory at https://access.redhat.com/articles/1537873 for specific patch information.

Vulnerability Details

EPSS (30-day exploit probability)

EPSS: 7.1%

Patch Available

Yes

Exploit Maturity

🔥 Actively Exploited

Disclosure Date

August 25, 2026

Classification

Attack SophisticationModerate

Monthly digest — independent AI security research

Original source: https://nvd.nist.gov/vuln/detail/CVE-2015-3246

First tracked: August 26, 2026 at 02:01 PM

Classified by LLM (prompt v3) · confidence: 95%