Qualys Cloud Agent Privilege Escalation Vulnerability via Uninstall Script

A vulnerability in the Qualys Cloud Agent for MacOS and Linux has been identified, involving a bundled uninstall script that executes multiple system commands without using absolute paths or sanitizing the $PATH environment. This flaw allows an attacker with root or sudo privileges to manipulate the execution of commands, potentially leading to local privilege escalation and arbitrary command execution with elevated rights.

Impact

Exploitation of this vulnerability could result in unauthorized local privilege escalation, allowing a user to gain elevated rights and execute commands as a superuser.