CVE-2026-46388

osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unprivileged attacker can read the contents of an osquery file carve until the carve completes and the temporary files are deleted because in-progress carve directories are not created with private permissions. If the carve targets a directory that the attacker controls, arbitrary file reads are possible, such as sensitive local files. This issue is fixed in version 5.23.1.

• CWE-279
• CWE-378
• CWE-379

• https://github.com/osquery/osquery/commit/6dabe9ded33bf9c6fc0f3e37ec364a1cbbd25d68
• https://github.com/osquery/osquery/pull/8961
• https://github.com/osquery/osquery/releases/tag/5.23.1
• https://github.com/osquery/osquery/security/advisories/GHSA-fg78-9q98-62hh

Published

Jul 10, 2026

Last Modified

Jul 10, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46377Dasel is a command-line tool and library for querying, modif…6.2
• CVE-2026-46378Dasel is a command-line tool and library for querying, modif…6.2
• CVE-2026-46383Microsoft APM is an open-source, community-driven dependency…5.5
• CVE-2026-46384iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, se…8.7
• CVE-2026-46385iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, th…8.7
• CVE-2026-46386OpenProject is open-source, web-based project management sof…9.9
• CVE-2026-46389UDS Identity Config builds the Keycloak configuration image …9.8
• CVE-2026-4639Vitals ESP developed by Galaxy Software Services has a Incor…8.8
• CVE-2026-46390HAX CMS helps manage microsite universe with PHP or NodeJs b…6.9
• CVE-2026-46391HAX CMS helps manage microsite universe with PHP or NodeJs b…8.7
• CVE-2026-46392HAX CMS helps manage microsite universe with PHP or NodeJs b…8.7
• CVE-2026-46393HAX CMS helps manage microsite universe with PHP or NodeJs b…7.1