Launchpad.net

CVE 2021-3899

There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root.

See the CVE page on Mitre.org for more details.