CVE-2026-113678 — Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron
Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take ownership of arbitrary host dir…
Published: 2026-10-20 · CVSS: 9.4 · CVSS 4.0
Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take ownership of arbitrary host directories by abusing the root-run traffic cron. Attackers can replace the goaccess statistics directory in their document root with a symlink, causing chown -R to hand root-owned trees to them and enabling root escalation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7