CVE-2026-61897

A flaw was found in AccountsService. An Ubuntu-specific patch for AccountsService did not fully drop root privileges when launching language helper scripts. This oversight allows a local user to exploit the incomplete privilege drop, potentially enabling them to reset their effective user ID to root. This could lead to local privilege escalation, granting unauthorized administrative access to the system.

This Important vulnerability in AccountsService stems from an Ubuntu-specific patch that incompletely drops privileges when launching language helper scripts. Red Hat products do not include this specific patch, therefore they are not directly affected by this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.