An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4…
CVSS 4.0HIGH 7.3·Local·Low privileges·No interaction·EPSS 0.00121·Published 2026-01-08·Fixed in 4.0.5CWE-73
An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper
CVSS 4.0MEDIUM 6.9·Local·Low privileges·No interaction·EPSS 0.00158·Published 2026-01-08·Fixed in 4.0.5CWE-88