CVE-2026-16742 PUBLISHED

systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path

Assigner: systemd
Reserved: 23.07.2026 Published: 10.08.2026 Updated: 10.08.2026

systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS Score: 6.7

CVSS 3.1

Vendor	systemd
Product	systemd-homed
Versions	Default: unaffected affected from 245 to 262, 261.2, 260.4, 259.8, 258.10 (excl.)