CVE-2026-29123: Privilege Escalation in SFX2100 Receiver

The vulnerability lies within a SUID root-owned binary located at /home/xd/terminal/XDTerminal. An attacker with local access can exploit this by manipulating the system's PATH environment variable, creating malicious symbolic links, or hijacking shared objects. Successful exploitation could grant the attacker root privileges, enabling them to execute arbitrary commands, access sensitive data, and potentially compromise the entire system. This represents a significant security risk, particularly in environments where the SFX2100 receiver is used to manage critical infrastructure or sensitive information.

1. Reserved2026-03-04
2. Published2026-03-05
3. EPSS updated2026-03-23

Due to the absence of a direct patch, mitigation focuses on reducing the attack surface. First, restrict the PATH environment variable to prevent attackers from injecting malicious binaries. Implement strict file permissions on /home/xd/terminal/XDTerminal and its parent directories, ensuring only authorized users have write access. Regularly audit the system for suspicious symbolic links or shared object modifications. Consider using AppArmor or SELinux to further confine the binary's capabilities. After implementing these mitigations, verify their effectiveness by attempting to execute the vulnerable binary with a non-root user and confirming that privilege escalation is prevented.