HexBrain

Homebrew · Report #593926

Homebrew privilege escalation vulnerability

Validstatus
highseverity
10upvotes
27 Jun 2019disclosed

Summary

Additional symlinks/directories that were not chownd by brew services needed to be added to avoid the replacement of the opt prefix link.

Homebrew has a privilege escalation vulnerability which can cause an attacker easily gain root permission.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original