CVE-2026-61897
published 2026-08-20CVE-2026-61897: An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the…
PriorityP344high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.14%
3.0th percentile
An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 (root). A shell spawned by a helper script inherits ruid=0 and may reset its effective UID to root, enabling local privilege escalation.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | accountsservice | >= 22.07.5-2ubuntu1 < 22.07.5-2ubuntu1.6 | 22.07.5-2ubuntu1.6 |
| canonical | accountsservice | >= 23.13.9-2ubuntu6 < 23.13.9-2ubuntu6.1 | 23.13.9-2ubuntu6.1 |
| canonical | accountsservice | >= 23.13.9-8ubuntu5 < 23.13.9-8ubuntu5.2 | 23.13.9-8ubuntu5.2 |
| canonical | accountsservice | >= 23.13.9-8ubuntu6 < 23.13.9-8ubuntu7 | 23.13.9-8ubuntu7 |
| ubuntu | accountsservice | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts.
ghsa_unreviewed·2026-08-20
CVE-2026-61897 [HIGH] CWE-273 An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts.
An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 (root). A shell spawned by a helper script inherits ruid=0 and may reset its effective UID to root, enabling local privilege escalation.
Red Hat
accountsservice: AccountsService: Local privilege escalation via incomplete privilege drop in language helper scripts
vendor_redhat·2026-08-20·CVSS 7.8
CVE-2026-61897 [HIGH] CWE-273 accountsservice: AccountsService: Local privilege escalation via incomplete privilege drop in language helper scripts
accountsservice: AccountsService: Local privilege escalation via incomplete privilege drop in language helper scripts
A flaw was found in AccountsService. An Ubuntu-specific patch for AccountsService did not fully drop root privileges when launching language helper scripts. This oversight allows a local user to exploit the incomplete privilege drop, potentially enabling them to reset their effective user ID to root. This could lead to local privilege escalation, granting unauthorized administrative access to the system.
Statement: This Important vulnerability in AccountsService stems from an Ubuntu-specific patch that incompletely drops privileges when launching language helper scripts. Red Hat products do not include this specific patch, therefore they are not directly affected by this
Ubuntu
AccountsService vulnerabilities
vendor_ubuntu·2026-07-21
CVE-2026-61897 AccountsService vulnerabilities
Title: AccountsService vulnerabilities
Summary: AccountsService could be made to run programs as an administrator if it
opened a specially crafted file.
It was discovered that the Ubuntu-specific SetLanguage patch to
AccountsService incorrectly handled dropping privileges. A local attacker
could use this issue to execute arbitrary commands as an administrator.
(CVE-2026-61897)
It was discovered that the Ubuntu-specific SetLanguage helpers for
AccountsService incorrectly handled parsing configuration files. A local
attacker could use this issue to execute arbitrary commands.
(CVE-2026-61898)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Ubuntu
AccountsService vulnerabilities
vendor_ubuntu·2026-07-21
CVE-2026-61898 AccountsService vulnerabilities
Title: AccountsService vulnerabilities
Summary: AccountsService could be made to run programs as an administrator if it
opened a specially crafted file.
USN-8580-1 fixed vulnerabilities in AccountsService. This update provides
the corresponding fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that the Ubuntu-specific SetLanguage patch to
AccountsService incorrectly handled dropping privileges. A local attacker
could use this issue to execute arbitrary commands as an administrator.
(CVE-2026-61897)
It was discovered that the Ubuntu-specific SetLanguage helpers for
AccountsService incorrectly handled parsing configuration files. A local
attacker could use this issue to execute arbitrary commands.
(CVE-2026
No detection rules found.
No public exploits indexed.
2026-08-20
Published