High severity8.1NVD Advisory· Published Apr 18, 2018· Updated Jun 17, 2026

CVE-2018-1088

Description

A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gluster/Glusterfsllm-fuzzy
Range: 3.x
osv-coords
pkg:rpm/opensuse/glusterfs&distro=openSUSE%20Leap%2015.1
Range: < 3.12.15-lp151.3.3.1
Red Hat, Inc./glusterfsv5
Range: 3.x

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchVendor Advisory
lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.htmlnvdMailing ListThird Party Advisory
access.redhat.com/errata/RHSA-2018:1136nvdVendor Advisory
access.redhat.com/errata/RHSA-2018:1137nvdVendor Advisory
access.redhat.com/errata/RHSA-2018:1275nvdVendor Advisory
access.redhat.com/errata/RHSA-2018:1524nvdVendor Advisory
lists.debian.org/debian-lts-announce/2021/11/msg00000.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/201904-06nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000