The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit allow_any/allow_inactive/allow_active settings that allow a local user to escalate their privileges to root.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | Jun 30, 2025 | Jun 28, 2025 |
| Ubuntu | — | Upgrade libzulucrypt-exe1.2.0 (Ubuntu Pro)Upgrade libzulucryptpluginmanager-dev (Ubuntu Pro)Upgrade libzulucrypt-dev (Ubuntu Pro)Upgrade zulucrypt-cli (Ubuntu Pro)Upgrade zulusafe-cli (Ubuntu Pro)Upgrade libzulucrypt-plugins (Ubuntu Pro)Upgrade zulupolkit (Ubuntu Pro)Upgrade libzulucryptpluginmanager1.0.0 (Ubuntu Pro)Upgrade libzulucrypt1.2.0 (Ubuntu Pro)Upgrade zulucrypt-gui (Ubuntu Pro)Upgrade zulumount-gui (Ubuntu Pro)Upgrade zulumount-cli (Ubuntu Pro)Upgrade libzulucrypt-exe-dev (Ubuntu Pro) | May 3, 2026 | Apr 30, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub