CyberRota Analysis
AI-GeneratedIn FRRouting versions prior to 8.5, a privilege escalation vulnerability exists that allows the service user to gain root access by exploiting a time-of-check to time-of-use (TOCTOU) race condition in the configuration directory. By monitoring the directory and replacing configuration files with symlinks, an attacker can manipulate file ownership of arbitrary files. Network administrators and organizations using FRRouting should prioritize patching to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.