Leeloo Multipath Authorization Bypass / Symlink Attack

Posted on 31 October 2022

The Qualys Research Team has discovered authorization bypass and symlink vulnerabilities in multipathd. The authorization bypass was introduced in version 0.7.0 and the symlink vulnerability was introduced in version 0.7.7.