Privilege Escalation Vulnerability in OpenCryptoki Package
Summary
ALSA-2026:5603: Moderate: opencryptoki security update. Affects opencryptoki versions < 3.25.0-4.el9_7.2. Fixed in 3.25.0-4.el9_7.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenCryptoki is a set of packages that implement the PKCS#11 API for IBM Cryptocards, including IBM 4764 and 4765 crypto cards. It supports various IBM cryptographic hardware and provides a software token implementation for cryptographic operations without hardware. The packages include utilities and a Slot Daemon (pkcsslotd) for managing cryptographic tokens.
Vulnerability Detail
The vulnerability identified as CVE-2026-23893 in OpenCryptoki allows for privilege escalation or data exposure via symlink following. This issue arises from improper handling of symbolic links, which could enable an attacker to manipulate file access permissions, potentially leading to unauthorized access to sensitive data or system resources.
How To Fix
Minimum fixed version
3.25.0-4.el9_7.2
This is the first release that contains the fix.
sudo dnf update opencryptokiTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, it is recommended to restrict access to the affected files and directories until the package can be updated. This can be done by modifying file permissions to limit access to authorized users only.
Conclusion
The OpenCryptoki package has a moderate vulnerability (CVE-2026-23893) that can lead to privilege escalation or data exposure. It is crucial to update to the patched version to secure your system. Utilize tools like Vulert for ongoing monitoring of vulnerabilities in your software.
See every vulnerability recorded for opencryptoki →
FAQ
CVE-2026-23893 is a vulnerability in OpenCryptoki that allows for privilege escalation or data exposure through improper handling of symbolic links.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring signup.
The vulnerability may lead to unauthorized access to sensitive data or system resources, which could compromise the security of the affected systems.
Yes, a patch is available. Update to version 3.25.0-4.el9_7.2 of the OpenCryptoki packages to mitigate the vulnerability.
If immediate updates are not possible, restrict access to the affected files and directories as a temporary measure until the update can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for opencryptoki.
