CVE-2017-15358

7.0 highEPSS 0.8%

High (7.0) in charlesproxy charles. EPSS 0.8% chance of exploitation in the next 30 days.

Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privileges via vectors involving the --self-repair option.

Severity

CVSS 3.0

7.0 high

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-362
Published: 2018-08-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

charlesproxy:charles

References

https://m4.rkw.io/blog/cve201715358-local-root-privesc-in-charles-proxy-42.html
https://www.exploit-db.com/exploits/45107/
https://m4.rkw.io/blog/cve201715358-local-root-privesc-in-charles-proxy-42.html
https://www.exploit-db.com/exploits/45107/

Check your stack JSON