CVE-2023-2091

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjust_cpufreq_scaling_governer. The manipulation leads to os command injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.4.13 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-226099.

• CWE-78

• https://github.com/i900008/vulndb/blob/main/youker-assistant_vuln.mdExploit, Third Party Advisory
• https://kylinos.cn/support/loophole/patch/3375.html
• https://vuldb.com/?ctiid.226099Permissions Required, Third Party Advisory
• https://vuldb.com/?id.226099Third Party Advisory
• https://github.com/i900008/vulndb/blob/main/youker-assistant_vuln.mdExploit, Third Party Advisory
• https://kylinos.cn/support/loophole/patch/3375.html
• https://vuldb.com/?ctiid.226099Permissions Required, Third Party Advisory
• https://vuldb.com/?id.226099Third Party Advisory

Published

Apr 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20903This disclosure regards a vulnerability related to UAA refre…4.3
• CVE-2023-20904In getTrampolineIntent of SettingsActivity.java, there is a …7.8
• CVE-2023-20905In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a po…7.8
• CVE-2023-20906In onPackageAddedInternal of PermissionManagerService.java, …7.8
• CVE-2023-20908In several functions of SettingsState.java, there is a possi…5.5
• CVE-2023-20909In multiple functions of RunningTasks.java, there is a possi…5.5
• CVE-2023-20910In add of WifiNetworkSuggestionsManager.java, there is a pos…5.5
• CVE-2023-20911In addPermission of PermissionManagerServiceImpl.java , ther…7.8
• CVE-2023-20912In onActivityResult of AvatarPickerActivity.java, there is a…7.8
• CVE-2023-20913In onCreate of PhoneAccountSettingsActivity.java and related…7.8
• CVE-2023-20914In onSetRuntimePermissionGrantStateByDeviceAdmin of AdminRes…5.5
• CVE-2023-20915In addOrReplacePhoneAccount of PhoneAccountRegistrar.java, t…7.8