SUSE PluginScript Chroot Bypass Vulnerability Allowing Execution of Host Binaries with Root Privileges

A vulnerability exists in SUSE's PluginScript due to improper handling of the chroot function. The script attempts to chroot plugins to the repoManagerRoot, which often defaults to the system root. This misconfiguration allows the chroot operation to be ineffective, enabling traversed paths to execute host binaries, such as /bin/bash, with root privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of host binaries with root privileges, potentially allowing for further escalation of privileges or execution of malicious payloads as the root user.