By weakness (CWE)

CWE-379: related vulnerabilities

CVEs classified under CWE-379. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-54328HIGH 7.3

  Pi, a lightweight terminal-based coding environment, contains a privilege escalation vulnerability in versions 0.74.0 through 0.78.0. When Pi installs temporary npm or git extension packages, it uses predictable file paths in the system's shared temporary directory. On multi-user Linux systems, an attacker with local access could place malicious code at these predictable locations before a victim user runs Pi, causing the victim's session to load and execute the attacker's code. This is a local attack requiring both system access and user interaction, but successful exploitation grants the attacker full code execution within the victim's process.