Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability
At a glance
Severity
HIGH 7.8
EPSS
EPSS 0.18 % · percentile 7 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
cisco
NVD status
Awaiting Analysis
Description
A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user.
This vulnerability is due to a lack of authentication when a local user connects to the Snort control channel socket. An attacker could exploit this vulnerability by connecting to the Snort 3 control channel socket as a local user. A successful exploit could allow the attacker to execute arbitrary commands as well as read and write Snort 3 process memory.
