US CISA Adds Severe Linux ‘Copy Fail’ Flaw to Watch List

“Copy Fail” is a local privilege-escalation vulnerability that has existed in Linux since 2017, allowing an attacker with a low-privilege account to gain root control. Linux is widely used by cryptocurrency exchanges, custody platforms and blockchain nodes, so exploitation of the flaw could put private keys, user assets and trading infrastructure at risk.

The U.S. Cybersecurity and Infrastructure Security Agency recently added “Copy Fail” to its Known Exploited Vulnerabilities catalog, confirming that attacks are no longer merely a theoretical risk. Research shows that an attacker can obtain root privileges with only a very short Python script consisting of a few lines of code. The finding has turned a flaw dormant for more than eight years into a major cybersecurity warning for the crypto industry.