Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Loading CVE intelligence

Loading vulnerability catalog

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

CVE-2023-1521

HighPublished

Local Privilege Escalation in sccache

Published: Nov 26, 2024
Updated: Nov 26, 2024
Assigning CNA: mozilla
Evidence observed: Aug 4, 2026

Primary CVSS

7.8/ 10High

nvd · CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

0.4%

Low · next 30 days

Percentile: 29.7%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LD_PRELOAD. If the server is run as root (which is the default when installing the snap package https://snapcraft.io/sccache ), this means a user running the sccache client can get root privileges.

Sources

CVE-2023-1521PoC
Proof-of-concept exploit for CVE-2023-1521 demonstrating LD_PRELOAD-based privilege escalation in sccache, enabling arbitrary code execution during compilation.

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.