onyx

onyx --cves cve-2026-34354

CVE-2026-34354

HIGHAkamai
score
<0.1
cvss
7.4
epss
0.4%
published
2026-05-08
kev added
—
first seen

Akamai Guardicore Platform Agent 7.0 through 7.3.1 and Zero Trust Client 6.0 through 6.1.5 on Linux and macOS contain a TOCTOU-based local privilege escalation caused by unauthenticated IPC control messages and command injection in gimmelogs, letting unprivileged local users escalate to root privileges, exploit requires local access.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2026-05-08 — PublishedP2026-10-21 (seen by) — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 0.3%2026-09-23: epss 0.3%2026-09-24: epss 0.4%2026-09-25: epss 0.4%2026-09-26: epss 0.4%2026-09-27: epss 0.4%2026-09-29: epss 0.4%2026-09-30: epss 0.4%2026-10-01: epss 0.4%2026-10-02: epss 0.4%2026-10-03: epss 0.4%2026-10-04: epss 0.4%2026-10-05: epss 0.4%2026-10-06: epss 0.4%2026-10-07: epss 0.4%2026-10-08: epss 0.4%2026-10-09: epss 0.4%2026-10-10: epss 0.4%2026-10-11: epss 0.4%2026-10-12: epss 0.4%2026-10-13: epss 0.4%2026-10-14: epss 0.4%2026-10-15: epss 0.4%2026-10-16: epss 0.4%2026-10-18: epss 0.4%2026-10-19: epss 0.4%2026-10-20: epss 0.4%2026-10-21: epss 0.4%0.4%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-367

References 1