High severity7.8NVD Advisory· Published Nov 12, 2026
CVE-2026-123039
CVE-2026-123039
Description
The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- PHP2Shell Exploitation on Check Point GatewayCheck Point Research · Nov 12, 2026