CVE-2024-48990

CVE-2024-48990 is a high-severity privilege escalation vulnerability affecting needrestart versions prior to 3.8, allowing local attackers to execute arbitrary code as root. This is achieved by manipulating the PYTHONPATH environment variable, tricking needrestart into running the Python interpreter with attacker-controlled input. With a CVSS score of 7.8, the vulnerability has a low attack complexity and can lead to complete compromise of confidentiality, integrity, and availability. While not yet listed in CISA KEV, a Metasploit module exists, and the vulnerability has garnered significant community discussion and media coverage, indicating a high potential for exploitation.