CVE-2026-77059 | boneIO up to 1.5.x Sudoers Management timezone_sudoers.py create_timedatectl_sudoers_file toctou

October 26, 2026 Yanac

A vulnerability identified as problematic has been detected in boneIO up to 1.5.x. Affected is the function create_timedatectl_sudoers_file of the file boneio/webui/routes/timezone_sudoers.py of the component Sudoers Management. The manipulation leads to time-of-check time-of-use.

This vulnerability is documented as CVE-2026-77059. The attack needs to be performed locally. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More