CVE-2026-46388: osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unprivileged attacker can read the contents of an osquery file c

mediumCVSS 4.4CVE-2026-46388

osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unprivileged attacker can read the contents of an osquery file carve until the carve completes and the temporary files are deleted because in-progress carve directories are not created with private permissions. If the carve targets a directory that the attacker controls, arbitrary file reads are possible, such as sensitive local files. This issue is fixed in version 5.23.1.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: medium — CVSS 4.4
Published: 2026-07-10
Last updated: 2026-07-10
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-46388

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-46388	coverage & exploitation status	NVD · CVE.org

Recent advisories for osquery is a

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownCVE-2026-54001: osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework…nvd · 2026-07-10
unknownCVE-2026-54000: osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework…nvd · 2026-07-10

CVE-2026-46388: osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unprivileged attacker can read the contents of an osquery file c

Details

Referenced CVEs

Recent advisories for osquery is a

More from NVD Recent CVEs