openSUSE munge vulnerabilities

Latest openSUSE munge CVEs

Newest publication first

1. CVE-2026-25506 MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery

   Published 2026-02-10

   High·CVSS 7.8 EPSS 0.34%

   MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication daemon) to leak cryptographic key material from process memory. With the leaked key...

2. CVE-2019-3691 Local privilege escalation from user munge to root

   Published 2020-01-23

   High·CVSS 7.8 EPSS 0.52%

   A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.