Severe Linux Copy Fail security flaw uncovered using AI scanning help

image via The Verge

May 1, 2026, 4:55 PM

• •Copy Fail allows users to gain administrator privileges.
• •The exploit uses a Python script.
• •The exploit is hard to detect.
• •Patches have been released by some distributions.

A recently discovered security flaw, dubbed "Copy Fail" (CVE-2026-31431), impacts nearly all Linux distributions released since 2017, allowing any user to gain administrator privileges. The exploit, publicly disclosed on Wednesday, utilizes a Python script that works across vulnerable distributions without requiring specific adjustments. Researchers at Theori identified the issue with the help of an AI tool, noting that its stealthy nature makes it difficult to detect with traditional monitoring tools. While some distributions like Arch Linux and RedHat Fedora have released patches, many others are still vulnerable despite a patch being added to the mainline Linux kernel on April 1st.

Read original article