Exploit for Incorrect Authorization in Polkit Project Polkit

githubexploit · 2021-07-02

Description

Polkit PrivEsc vulnerability in Ubuntu

Entry point

Parameterstring:boris · path

Path/org/freedesktop/Accounts

Creation of a new unprivileged user via polkit D-Bus call (accounts-daemon) exploited by the vulnerability.

Affected Polkit Project Polkit versions

Polkit Project Polkit< 0.119

All known vulnerabilities by product

Alt Linux Centos Linuxmint Polkit Red Hat Red Os Rocky Linux Suse

CVSS 7.8 for CVE-2021-3560

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

95%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

22.2%higher than 97.4% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2024-08-26 07:05

Last Seen:2025-08-31 20:58

Reporter:mr-nobody20

Written in:Shell

Last commit:2021-08-05

Tags

exploitpolkitCVE-2021-3560ubuntuprivilege escalation

Other exploits for CVE-2021-3560

CVE-2021-3560-Polkit-DBus

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

POC-Bash-CVE-2021-3560

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

exploit-CVE-2021-3560

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

exploit_CVE-2021-3560

2026-08-26 KitPloitKITPLOIT

Exploit Code

README7 lines

## https://sploitus.com/exploit?id=A98AE857-3243-58DB-B11E-BF7F9CBDA573
# CVE-2021-3560
# CTF



a simple poc script for polkit PrivEsc vulnerability in ubunutu