Vulnerability in Osquery
CVE-2026-46388
osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unprivileged attacker can read the contents of an osquery file carve until the carve completes and the temporary files are…
CVSS v3 metric
CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N.
Affected products
- Osquery — versions < 5.23.1
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-46388?
- CVE-2026-46388 is a medium-severity vulnerability in Osquery, classified under Incorrect Execution-Assigned Permissions. CVSS score: 4.4/10. Published 2026-07-10.
- How severe is CVE-2026-46388?
- Medium severity. CVSS v3 base score is 4.4 out of 10.