CVE-2023-41915

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0.

• CWE-362

• http://www.openwall.com/lists/oss-security/2024/07/10/3
• http://www.openwall.com/lists/oss-security/2024/07/10/4
• http://www.openwall.com/lists/oss-security/2024/07/10/6
• http://www.openwall.com/lists/oss-security/2024/07/11/3
• https://docs.openpmix.org/en/latest/security.htmlNot Applicable
• https://github.com/openpmix/openpmix/releases/tag/v4.2.6Release Notes
• https://github.com/openpmix/openpmix/releases/tag/v5.0.1Release Notes
• https://lists.debian.org/debian-lts-announce/2023/10/msg00048.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFKIY6SNC3KQNZMVROWMIW6DI5XPNKQX/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYJ7IRNR6NHJMTNOV3E3W3D5MLDRDCJX/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDLWSMQYXF2ZGOQKCG26H6ZZA5FEH7HX/Mailing List, Third Party Advisory
• https://www.debian.org/security/2023/dsa-5547Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/07/10/3
• http://www.openwall.com/lists/oss-security/2024/07/10/4
• http://www.openwall.com/lists/oss-security/2024/07/10/6
• http://www.openwall.com/lists/oss-security/2024/07/11/3
• https://docs.openpmix.org/en/latest/security.htmlNot Applicable
• https://github.com/openpmix/openpmix/releases/tag/v4.2.6Release Notes
• https://github.com/openpmix/openpmix/releases/tag/v5.0.1Release Notes
• https://lists.debian.org/debian-lts-announce/2023/10/msg00048.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFKIY6SNC3KQNZMVROWMIW6DI5XPNKQX/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYJ7IRNR6NHJMTNOV3E3W3D5MLDRDCJX/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDLWSMQYXF2ZGOQKCG26H6ZZA5FEH7HX/Mailing List, Third Party Advisory
• https://www.debian.org/security/2023/dsa-5547Third Party Advisory

Published

Sep 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-41909An issue was discovered in FRRouting FRR through 9.0. bgp_nl…7.5
• CVE-2023-4191A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-41910An issue was discovered in lldpd before 1.0.17. By crafting …9.8
• CVE-2023-41911Samsung Mobile Processor Exynos 2200 allows a GPU Double Fre…5.5
• CVE-2023-41913strongSwan before 5.9.12 has a buffer overflow and possible …9.8
• CVE-2023-41914SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.0…7
• CVE-2023-41916 In Apache Linkis =1.4.0, due to the lack of effective filte…6.5
• CVE-2023-41917Inadequate input validation exposes the system to potential …10
• CVE-2023-41918A vulnerability allows unauthorized access to functionality …10
• CVE-2023-41919Hardcoded credentials are discovered within the application'…9.8
• CVE-2023-4192A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-41920The vulnerability allows attackers access to the root accoun…9.8