SZB-1d26576fce
Tenable discloses Nessus flaw letting low-privileged users read files on Linux
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Tenable
- Product
- Nessus
- First seen
Summary
EUVD-2026-113393 describes a flaw in Nessus on Linux that lets an authenticated, low-privileged user with scan-creation rights read arbitrary text files on the scanner host. The entry gives a CVSS v3.1 score of 6.0 out of 10.
If you use Tenable
Update Nessus to a fixed version as listed in Tenable's advisory
Limit scan-creation rights to users who need them
Review scanner host file permissions and audit compliance scans
What the sources say 1
· Mastodon: “On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the privileges of the nessusd process by running a custom Unix compliance audit against the scanner itself.” Source