CVE-2014-2093: Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a...

Security readout for executives and security teams

CVE-2014-2093 is a local privilege-risk flaw in Catfish through 0.4.0.3. If Catfish is launched from an attacker-controlled directory, it may load a malicious local file named catfish.py. The sources do not show internet-wide exploitability or active exploitation. Exposure is most likely on older Linux desktop systems or distributions carrying Catfish 0.4.0.3 or earlier. Systems without Catfish, or where users cannot control working directories used to launch it, are less exposed. Treat this as a targeted local privilege risk, not an emergency remote compromise. Prioritize legacy Linux systems, shared workstations, and environments where local users may run graphical tools with elevated privileges. Mitigation focus: Identify Catfish installations and remove unsupported versions.; Check vendor or distribution guidance for fixed Catfish packages.; Avoid launching Catfish with elevated privileges..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.