CWE-271: Privilege Dropping / Lowering Errors
Filter
The product does not drop privileges before passing control of a resource to an actor that does not have those privileges.
What the weakness is: CWE-271 at MITRE. All weaknesses
Ask an AI about CWE-271
Show the prompt
Explain CWE-271: Privilege Dropping / Lowering Errors and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/271.html and https://cve.bz/cve/cwe/271?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.4CVE-2026-44477EPSS 0.5%
CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its PostgreSQL connection as the postgres superuser via the pod-local …
- 7.8CVE-2026-35535EPSS 0.2%
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
- 5.8CVE-2026-25704EPSS 0.08%
A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic. …
- 7.9CVE-2025-53819EPSS 0.1%
Nix is a package manager for Linux and other Unix systems. Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. The fix was applied to Nix 2.30.1. No known workarounds are available.
- 7.3CVE-2025-23395EPSS 0.3%
Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path. This allows unprivileged users to create files in arbitrary locations with `root` ownership, the invoking user's (real)…
- 6.8CVE-2024-35179EPSS 0.6%
Stalwart Mail Server is an open-source mail server. Prior to version 0.8.0, when using `RUN_AS_USER`, the specified user (and therefore, web interface admins) can read arbitrary files as root. This issue affects admins who have set up to r…
- 8.0CVE-2024-0985EPSS 1.8%
Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, …
- 3.3CVE-2023-38496EPSS 0.3%
Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, therefore subsequent functions are called with root privileges, the attack surface is rath…
- 8.8CVE-2023-22648EPSS 0.5%
A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they are logged in the Rancher UI. This would cause the users to retain their previous permissions in …
- 7.8CVE-2022-3569ExploitEPSS 0.8%
Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior, where the 'zimbra' user can effectively coerce postfix into running arbitrary co…
- 4.9CVE-2020-35513EPSS 1.4%
A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the way user create and delete object using NFSv4.2 or newer if both simultaneously accessing the NFS by …
- 8.1CVE-2019-11243EPSS 1.7%
In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer token, username/password, and client certificate/key data). In the affected versions…