Fuji Tellus Driver Grants All Users Kernel R/W: CVE-2026-8108

The National Vulnerability Database has detailed CVE-2026-8108, a high-severity vulnerability (CVSS 7.8) affecting Fuji Tellus. This flaw stems from the installation of a kernel driver that indiscriminately grants read and write permissions to all system users. This isn’t just poor security hygiene; it’s a critical privilege escalation vector.

An attacker with even low-level access can leverage this to gain full control over the kernel. Think about that: any user, any process, suddenly has the keys to the kingdom. This is a fundamental breakdown in the operating system’s security model, making it trivial for malware to persist, evade detection, and execute arbitrary code with maximum privileges. The attacker’s calculus here is simple: if they can get a foothold on a system with Fuji Tellus, they’ve essentially won the privilege game.

For defenders, this means immediate action. Any system running Fuji Tellus is inherently compromised if an attacker can gain local access. This vulnerability provides a direct pathway to root, bypassing standard security controls and making incident response significantly harder. This isn’t about patching an application; it’s about a foundational flaw introduced at the kernel level.