CVE-2024-48991

CVE-2024-48991 is a race condition vulnerability affecting needrestart, allowing local attackers to achieve arbitrary code execution as root by manipulating the Python interpreter path. This vulnerability carries a high CVSS score of 7.8, indicating a local attack vector with low complexity, leading to high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media attention, suggesting awareness among security researchers. Users of needrestart should update to version 3.8 or later to mitigate this risk.