CVE-2024-9312
Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.
CVSS 3.1 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products