CVE-2017-8108

CVE-2017-8108 describes a local privilege escalation vulnerability affecting Lynis versions prior to 2.5.0. Attackers can exploit unspecified tests within Lynis via a symlink attack on temporary files, potentially leading to arbitrary file writes or privilege escalation. With a CVSS score of 7.8 (High), this vulnerability is easily exploitable by a local attacker with low privileges and no user interaction, resulting in high impact to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.