CVE-2026-123039: Check Point Gaia OS Local Privilege Escalation

CVSS 7.8 (HIGH) · Actively exploited (listed in CISA KEV)

Check Point Gaia OS DynamicCLI daemon listens on a world-writable socket without authentication. This allows authenticated local users to execute commands as root.

Impact

Attackers can gain full root access to the system, compromising confidentiality, integrity, and availability.

What to do

Apply vendor mitigations immediately and ensure compliance with CISA BOD 26-04 guidance.

中文摘要

Check Point Gaia OS 的 DynamicCLI 守護程序在未驗證的情況下監聽全域可寫套接字。這使得經過身份驗證的本地用戶能夠以 root 權限執行命令。

立即應用廠商提供的緩解措施，並確保符合 CISA BOD 26-04 指南。

References

• NVD CVE-2026-123039
• CISA Known Exploited Vulnerabilities
• support.checkpoint.com