Copy Fail: New Linux bug enables Root via page‑cache corruption
2026-05-01T02:51:48Z•a2566e273781b25241d68b0456d403058e02e51ea99493deff6d4c4bc8c48015
AnodotCISACVE-2024-02-21CVE-2026-31431CVE-2026-3854CVE-2026-42208ConnectWiseCopy FailShinyHuntersVimeoWindows Shellaccount-takeover','credential-theft','meta','dsa','child-safety-authentication-bypasscpaneldata-breachgithubknown-exploited-vulnerabilitieslinuxlitellmpage-cachepatchesprivilege-escalationremote-code-executionrobloxsql-injection
What happened
Multiple high-impact security incidents and vulnerabilities were reported: a local Linux privilege‑escalation bug dubbed “Copy Fail” (CVE-2026-31431, CVSS 7.8) allows any local user to write four controlled bytes into page-cache files enabling easy root escalation on major distributions; a critical LiteLLM Python package SQL injection (CVE-2026-42208) was actively exploited within ~36 hours to access/modify databases; a critical GitHub command‑injection vulnerability (CVE-2026-3854) enables remote code execution via a simple git push; all supported cPanel versions were patched to fix a serious
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- a2566e273781b25241d68b0456d403058e02e51ea99493deff6d4c4bc8c48015
- Enrichment time
- 2026-05-01T02:51:48Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.