Malicious actors with code execution capability may gain root access on Linux systems using as few as 10 lines of Python, according to a researcher.

The discoverers have named the root vulnerability "Copy Fail". All major distributions since 2017 are affected.

CVE-2026-31431 CVSS 7.8 flaw since 2017 enables root via 732-byte exploit, impacting major Linux distributions.

CVE-2026-5752 CVSS 9.3 flaw in Terrarium enables root code execution via Pyodide prototype traversal, risking container ...