CVE-2024-33522: Insecure Suid Chmod

Explicitly setting the SUID bit on installed binaries grants elevated privileges to any executing user. If the underlying binary can process user-controlled inputs, environment variables, or arguments, this setup trivially enables absolute Local Privilege Escalation (LPE) to the file owner's context (often root). Ensure this configuration is intentional, or

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Go
greprules fetch cve-2024-33522-insecure-suid-chmod --engine opengrep

Description

Explicitly setting the SUID bit on installed binaries grants elevated privileges to any executing user. If the underlying binary can process user-controlled inputs, environment variables, or arguments, this setup trivially enables absolute Local Privilege Escalation (LPE) to the file owner's context (often root). Ensure this configuration is intentional, or