High severity7.8CISA KEVNVD Advisory· Published Jan 28, 2022· Updated Aug 15, 2026

CVE-2021-4034

Description

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oracle Corporation/HTTP Server2 versions
cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*
Oracle Corporation/Zfs Storage Appliance Kit
cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
Polkit Project/Polkit
cpe:2.3:a:polkit_project:polkit:*:*:*:*:*:*:*:*
Range: <121
Red Hat/Enterprise Linux Server Update Services For Sap Solutions5 versions
cpe:2.3:a:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.6:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.6:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.7:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*
Siemens Foundation/Sinumerik Edge
cpe:2.3:a:siemens:sinumerik_edge:*:*:*:*:*:*:*:*
Range: <3.3.0
Starwindsoftware/Command Center
cpe:2.3:a:starwindsoftware:command_center:1.0:update3_build5871:*:*:*:*:*:*
Starwindsoftware/Starwind Virtual San
cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build14338:*:*:*:*:*:*
SUSE S.A./Enterprise Storage
cpe:2.3:a:suse:enterprise_storage:7.0:*:*:*:*:*:*:*
SUSE S.A./Linux Enterprise High Performance Computing
cpe:2.3:a:suse:linux_enterprise_high_performance_computing:15.0:sp2:*:*:-:*:*:*
SUSE S.A./Manager Proxy
cpe:2.3:a:suse:manager_proxy:4.1:*:*:*:*:*:*:*
SUSE S.A./Manager
cpe:2.3:a:suse:manager_server:4.1:*:*:*:*:*:*:*
Canonical/Ubuntu Linux5 versions
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*+ 4 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:21.10:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server3 versions
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Desktop
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Eus2 versions
cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems2 versions
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems Eus2 versions
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Big Endian
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian2 versions
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian Eus3 versions
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Scientific Computing
cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Aus6 versions
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Tus4 versions
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Workstation
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Siemens Foundation/Scalance Lpe9403 Firmware
cpe:2.3:o:siemens:scalance_lpe9403_firmware:*:*:*:*:*:*:*:*
Range: <2.0
SUSE S.A./Linux Enterprise Desktop
cpe:2.3:o:suse:linux_enterprise_desktop:15:sp2:*:*:*:*:*:*
SUSE S.A./Linux Enterprise Server2 versions
cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:*:-:*:*+ 1 more
- cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:*:-:*:*
- cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:*:sap:*:*
SUSE S.A./Linux Enterprise Workstation Extension
cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp5:*:*:*:*:*:*
polkit/pkexecdescription
Polkit Org/pkexecllm-fuzzy
osv-coords43 versions
pkg:rpm/almalinux/polkit pkg:rpm/almalinux/polkit-devel pkg:rpm/almalinux/polkit-docs pkg:rpm/almalinux/polkit-libs pkg:rpm/opensuse/polkit&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/polkit&distro=openSUSE%20Tumbleweed pkg:rpm/suse/polkit&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/polkit&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/polkit&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Micro%205.0 pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/polkit&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5 pkg:rpm/suse/polkit&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/polkit&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/polkit&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/polkit&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/polkit&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/polkit&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/polkit&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 0.115-13.el8_5.2+ 42 more
- (no CPE)range: < 0.115-13.el8_5.2
- (no CPE)range: < 0.115-13.el8_5.2
- (no CPE)range: < 0.115-13.el8_5.2
- (no CPE)range: < 0.115-13.el8_5.2
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.120-2.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.114-3.15.1
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.114-3.15.1
- (no CPE)range: < 0.114-3.15.1
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.114-3.15.1
- (no CPE)range: < 0.114-3.15.1
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.114-3.15.1
- (no CPE)range: < 0.114-3.15.1
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.114-3.15.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.114-3.15.1
- (no CPE)range: < 0.114-3.15.1
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.116-3.6.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.113-5.24.1
- (no CPE)range: < 0.113-5.24.1

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatch
gitlab.freedesktop.org/polkit/polkit/-/commit/a2bf5c9c83b6ae46cbd5c779d3055bff81ded683nvdPatch
www.oracle.com/security-alerts/cpuapr2022.htmlnvdPatchThird Party Advisory
packetstormsecurity.com/files/166196/Polkit-pkexec-Local-Privilege-Escalation.htmlnvdExploitThird Party AdvisoryVDB Entry
www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txtnvdExploitMitigationThird Party Advisory
www.secpod.com/blog/local-privilege-escalation-vulnerability-in-major-linux-distributions-cve-2021-4034/nvdExploitThird Party Advisory
www.vicarius.io/vsociety/posts/pwnkit-pkexec-lpe-cve-2021-4034nvdExploitThird Party Advisory
packetstormsecurity.com/files/166200/Polkit-pkexec-Privilege-Escalation.htmlnvdThird Party AdvisoryVDB Entry
access.redhat.com/security/vulnerabilities/RHSB-2022-001nvdMitigationVendor Advisory
cert-portal.siemens.com/productcert/pdf/ssa-330556.pdfnvdThird Party Advisory
www.starwindsoftware.com/security/sw-20220818-0001/nvdThird Party Advisory
www.suse.com/support/kb/doc/nvdThird Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
The Hacker News · Jul 24, 2026
Operation Escaneo Signals Shift in LatAm Threat Landscape
Dark Reading · Jun 18, 2026
What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant
Securelist · May 29, 2026

cvss	0.507
epss	0.076
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.060