Cloudflare Octorpki Local Privilege Escalation Vulnerability via Rsync SUID Bit Mismanagement

A local privilege escalation vulnerability exists in Cloudflare Octorpki versions prior to 1.4.0. The issue arises because Octorpki, when copying files with rsync, improperly uses the '-a' flag, which transfers binaries with the SUID bit set as root. This misconfiguration, combined with another vulnerability that leads Octorpki to process a malicious TAL file, could create a vector for local privilege escalation.

Impact

Exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing a user to gain root access.

Remediation

Users can upgrade to Octorpki version 1.4.2 or later to address this vulnerability.