CVE-2019-18409

CVE-2019-18409 describes a local privilege escalation vulnerability in the ruby_parser-legacy gem (version 1.0.0) for Ruby, stemming from world-writable files. This allows a local attacker to inject malicious code into the ruby_parser.rb file, particularly when used by dependent gems like Brakeman versions 4.5.0 through 4.7.0. The vulnerability has a CVSS score of 7.8 (High), indicating a low attack complexity and the potential for high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.