Exploit for CVE-2021-3560 CVE-2021-3560 CVE-2021-3650

kitploit · 2026-08-27

Description

Privilege escalation in polkit on Linux leading to root access.

Entry point

Parameterstring:boris · path

Path/org/freedesktop/Accounts

Creation of a new unprivileged user via polkit D-Bus call (accounts-daemon) exploited by the vulnerability.

Affected Polkit Project Polkit versions

Polkit Project Polkit< 0.119

All known vulnerabilities by product

Alt Linux Centos Linuxmint Polkit Red Hat Red Os Rocky Linux Suse

CVSS Score

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

References

https://github.com/Almorabea/Polkit-exploit

https://github.blog/security/vulnerability-research/privilege-escalation-polkit-root-on-linux-with-bug/

Exploit Details

Modified:2026-08-27 03:10

Last Seen:2026-08-27 20:19

Reporter:KitPloit

Tags

polkitprivilege escalationroot accessLinuxCVE-2021-3650

Other exploits for the same CVE

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

exploit-CVE-2021-3560

2026-08-28 KitPloitKITPLOIT

SideWinder-Exploit

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

CVE-2021-3560-PolkitPrivilegeEsclation

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

CVE-2021-3560-EXPLOIT

2026-08-28 KitPloitKITPLOIT

Exploit Code

MARKDOWN10 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-MANDIPJOSHI-CVE-2021-3560
# CVE-2021-3650

Эксплойт CVE-2021-3650

Благодарности

https://github.blog/security/vulnerability-research/privilege-escalation-polkit-root-on-linux-with-bug/

https://github.com/Almorabea/Polkit-exploit