PwnKit Vulnerability

Share This Post

PwnKit Vulnerability

Researches at Qualys have discovered a local privilege escalation vulnerability in all distributions of Linux. This vulnerability appears to be trivial to exploit, though it does require some level of “local” access (could potentially be used with SSH or other remote-control methods) for execution.

Proof of Concept exploits have been developed and released. Exploitation is likely at this point. Patches have been released and should be applied.

Qualys Report: https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034



Reach out to our incident response team for help

More To Explore

Information Security News – 5/11/26

Hackers Steal Students’ Data During Breach at Education Tech Giant Instructure Article Link: https://techcrunch.com/2026/05/05/hackers-steal-students-data-during-breach-at-education-  tech-giant-instructure/ DigiCert Revokes Certificates After Support Portal Hack Article Link: https://www.securityweek.com/digicert-revokes-certificates-after-support-portal-hack/

Information Security News – 5/4/2026

Phishing Campaign Abuses Event Invitations to Target U.S. Firms  Article Link: https://cyberpress.org/fake-invites-target-firms/  PyPI Package With 1.1M Monthly Downloads Hacked to Push Infostealer  Article Link: https://www.bleepingcomputer.com/news/security/pypi-package-with-11m-monthly-downloads-hacked-to-push-infostealer/ 

Do You Want to Shore Up Your Defenses?

We're opening our first round of threat hunting engagements to 100 organizations. Sign up or join the wait list here.