{"id":"CVE-2024-39934","details":"Robotmk before 2.0.1 allows a local user to escalate privileges (e.g., to SYSTEM) if automated Python environment setup is enabled, because the \"shared holotree usage\" feature allows any user to edit any Python environment.","modified":"2026-08-12T03:51:35.897521818Z","published":"2024-07-04T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39934.json","cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://checkmk.com/werk/16434"},{"type":"WEB","url":"https://github.com/elabit/robotmk/compare/v2.0.0...v2.0.1"},{"type":"WEB","url":"https://github.com/elabit/robotmk/releases/tag/v2.0.1"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39934.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39934"},{"type":"FIX","url":"https://github.com/elabit/robotmk/commit/78c1174ab2df43813050d0c22e1efb8636f8715e"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/elabit/robotmk","events":[{"introduced":"0"},{"fixed":"b4b6659cb107c69f650ab5889c2ce45d06f714e6"},{"fixed":"78c1174ab2df43813050d0c22e1efb8636f8715e"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"2.0.1"}],"source":["DESCRIPTION","REFERENCES"]}}],"versions":["v2.0.0","v2.0.0-beta-2","v2.0.0-beta-1","stable","v2.0.0-beta-0","v2.0.0-alpha-13","v2.0.0-alpha-12","v2.0.0-alpha-11","v2.0.0-alpha-10","v2.0.0-alpha-9","v2.0.0-alpha-8","v2.0.0-alpha-7","v2.0.0-alpha-6","v2.0.0-alpha-5","v2.0.0-alpha-4","v2.0.0-alpha-3","v2.0.0-alpha-2","v2.0.0-alpha-1","v2.0.0-alpha"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39934.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N"}]}