Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-48990 — an exploit for CVE-2024-48990 ( Local Privilege Escalation ) in needrestart | Kitploit
Tools/GitHubGitHub/o-sec/cve-2024-48990
Privilege EscalationVulnerability AnalysisExploitationPenetration TestingLearning & Education
GitHubo-sec/cve-2024-48990

CVE-2024-48990

an exploit for CVE-2024-48990 ( Local Privilege Escalation ) in needrestart

View Repository
238 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-48990 POC

Overview

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.

This repository contains a proof-of-concept (PoC) exploit for CVE-2024-48990.

Vulnerability Summary

  • CVE ID: CVE-2024-48990
  • Affected Component: needrestart
  • Vulnerability Type: Local Privilege Escalation
  • Attack Vector: Local
  • Impact: Privilege escalation to root

Usage

root@kitploit:~
./poc.sh

"loop.py" and "privesc.py" is just a sample for the exploitation, you dont need to bring them with the poc.sh !. all you need is the poc.sh

Disclaimer

This project is intended for educational and research purposes only. The author is not responsible for any misuse of this code or for any damage resulting from its use.

Download Tool