CVE-2021-31155

HIGH 7.8CVE-2021-31155 · Published 27/05/2021 · updated 17/06/2026

In short

CVE-2021-31155 is a HIGH (CVSS 7.8) vulnerability affecting umask (umask project).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.3% of all vulnerabilities.
Fix: update to 0.4 or later.

Package	Affected versions	Patched versions
umask umask_project	`< 0.4`	`0.4`

Description

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.

References

gitlab.com/edneville/please/-/tree/master/src/bin · Third Party Advisory
openwall.com/lists/oss-security/2021/05/18/1 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free