Auth bypass in Selinuxproject Selinux

CVE-2026-59677

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.

Vulnerability class: Broken Access Control

EPSS: 0.001 (3.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References