CVE-2022-41950 MEDIUM

CVE-2022-41950: Privilege Escalation Vulnerability by wrong chmod param

Vendor 4Ra1N

Product super-xray

Weakness CWE-250

Published November 22, 2022

Last update April 22, 2025

View on NVD All CVEs

CVSS base score

6.4/10

Attack vector Local

Attack complexity High

Privileges required High

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta.

Key dates

02Disclosure timeline

November 22, 2022 CVE published

April 22, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-41950 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/250.html

Related vulnerabilities

04Related CVE

CVE-2025-58379 Password Exposure in Brocade Fabric OS CVE-2026-1346 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access CVE-2026-42088 OpenC3 COSMOS: Administrative Actions via the Script Runner Tool CVE-2025-36059 Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025 CVE-2026-32643 BIG-IP and BIG-IQ privilege escalation vulnerability