The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.
Is CVE-2026-123039 exploited?
Listed in the CISA KEV catalog on 2026-11-13.
Federal remediation due 2026-11-16.
Public exploit code: none found in monitored sources.
Which products and versions are affected?
checkpoint · Quantum Security Gateway · R82.10 with Jumbo Hotfix Take 50 or below, R82.20 with Jumbo Hotfix Take 10 or below, R82 with Jumbo Hotfix Take 130 or below, R81.20 with Jumbo Hotfix Take 173 or below
checkpoint · Quantum Security Management · R82.10 with Jumbo Hotfix Take 50 or below, R82.20 with Jumbo Hotfix Take 10 or below, R82 with Jumbo Hotfix Take 130 or below, R81.20 with Jumbo Hotfix Take 173 or below