Critical Flaw in OATH-Toolkit PAM Module Could Lead to Root Exploits

Discovered by Matthias Gerstner of the SUSE Security Team, this vulnerability (CVE-2024-47191) allows unprivileged users to manipulate file operations conducted by the PAM stack, which operates with root privileges.