A vulnerability allowing root privileges has been discovered in OpenBSD

A use-after-free vulnerability affecting all versions up to and including 7.9 has been identified in the OpenBSD operating system. The issue has been assigned the identifier CVE-2026-57589.

The nature of the vulnerability

Use-after-free is a class of bugs in which a program continues to use a region of memory after it has been freed, which can lead to memory corruption and arbitrary code execution. In this case, the vulnerability allows a local user of the system to escalate their privileges to the root level.

Conditions for exploitation

Exploiting the vulnerability requires local access to the system — that is, an attacker must already be able to execute code as an unprivileged user. From there, by exploiting the use-after-free bug, they are able to gain full control of the system with superuser rights.

What is known so far

Details about the specific vulnerable system component, as well as the availability of a fix, are not provided in the public source. The entry for CVE-2026-57589 has been registered in the NVD database.

OpenBSD users running versions up to and including 7.9 are advised to follow the project's official announcements and to promptly install security updates once they are released.

Source: Lobsters