REDHAT-BUG-2362345: High severity yggdrasil vulnerability

Published Apr 25, 2025

Updated

The yggdrasil application does not perform any kind of authentication or authorization check on com.redhat.Yggdrasil.Dispatch() DBus method, allowing attacker to abuse of the yggdrasil-worker-package-manager to perform a local privilege escalation

Affected Software

1 affected component

Red Hat Yggdrasil

Event History

Apr 25, 2025

Data Sourced

via Red Hat·05:13 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2362345?

The severity of REDHAT-BUG-2362345 is critical due to the potential for local privilege escalation.

How do I fix REDHAT-BUG-2362345?

To fix REDHAT-BUG-2362345, apply the latest security patches provided by Red Hat for the Yggdrasil application.

What vulnerabilities are associated with REDHAT-BUG-2362345?

REDHAT-BUG-2362345 is associated with an authentication and authorization bypass that leads to local privilege escalation.

Who is affected by REDHAT-BUG-2362345?

Users of the Red Hat Yggdrasil application are affected by REDHAT-BUG-2362345.

What actions should I take if I am vulnerable to REDHAT-BUG-2362345?

If vulnerable to REDHAT-BUG-2362345, immediately apply the security updates and review access controls on your system.