← Back to CVE List
CVE-2020-26947
monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH (with a preference ahead of /usr/lib), which allows local users to gain privileges via a Trojan horse library in the current working directory.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt