CVE-2026-105773: Canimaan Software ClamXAV local privilege escalation
Published Oct 5, 2026
·Updated
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1.
Affected Software
1 affected component
Canimaan Software ClamXAV>=3.3<=3.11
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Canimaan Software ClamXAVto a version that resolves this vulnerability.Fixed in 3.11.1
Event History
Oct 5, 2026
CVE Published
via MITRE·08:38 PM
Data Sourced
via MITRE·08:38 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
Canimaan Software ClamXAV versions 3.3 through 3.11 are affected. Version 3.11.1 fixes the vulnerability.
2
What access does an attacker need to exploit this issue?
An attacker needs local access and low privileges on the affected system. Exploitation does not require user interaction and can result in arbitrary code execution with system privileges.