:

PACK2THEROOT FLAW GIVES HACKERS ROOT LINUX ACCESS

DEV DESK1 MIN READ
FRI, APR 24, 2026

■ AI-SUMMARIZED FROM 1 SOURCE BELOW

A new vulnerability called Pack2TheRoot allows local Linux users to exploit the PackageKit daemon and gain root permissions. The flaw enables attackers to install or remove system packages with elevated privileges.

The vulnerability Pack2TheRoot affects PackageKit, a system service that manages software installation and removal across Linux distributions. Local users can trigger the flaw to escalate privileges and execute commands with root-level access. Attack scope The vulnerability requires local access to a target system. Once exploited, attackers can modify package management operations, potentially installing malicious software or removing critical security updates. Impact Affected systems running vulnerable versions of PackageKit face significant risk. The flaw could be chained with other exploits to achieve broader system compromise. Next steps Linux distributions and system administrators should monitor for patches addressing Pack2TheRoot. Users are advised to restrict local access to systems running potentially vulnerable PackageKit versions and apply updates when available.

■ SOURCES

Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Microsoft will roll out passkey support for Microsoft Entra-protected resources on Windows devices starting late April. The move enables phishing-resistant passwordless authentication for enterprise users.

1H AGOIndustry Desk

A new financially motivated hacking group called BlackFile has launched a wave of data theft and extortion attacks against retail and hospitality organizations since February 2026. The group employs vishing tactics to compromise victims.

1H AGOIndustry Desk

France's national forecasting office has referred suspected tampering with weather sensors at Paris's largest airport to police after detecting unusual readings. The discovery coincides with betting activity on Polymarket.

3H AGOAI Desk

Researchers have identified a previously unknown spyware developer whose malicious apps were distributed by government authorities to infiltrate Android devices. The discovery marks another instance of state-sponsored mobile surveillance.

3H AGOIndustry Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.