Common Weakness Enumeration
CWE-272 Least Privilege Violation
Description
The elevated privilege level required to perform operations such as chroot() should be dropped immediately after the operation is performed.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-272 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-v52w-28xh-v562 | - | HIGH |
Kozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding, request-body limits, read-only reads, default network exposure) |
2026-06-19 | |
| GHSA-r427-j2h7-wv3m | CVE-2026-55226 | MODERATE |
Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator |
2026-06-18 | |
| GHSA-w54x-r83c-x79q | CVE-2026-23634 | LOW |
Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode |
2026-01-16 | |
| GHSA-mxr3-8whj-j74r | CVE-2025-32955 | MODERATE | - |
Harden-Runner allows evasion of 'disable-sudo' policy |
2025-04-22 |