Story
Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)
1 report
1 website
1 discussion
Latest report
Overview
CVE-2026-4747 affects FreeBSD versions 13.5, 14.3, 14.4, and 15.0, specifically when the NFS server with kgssapi.ko loaded is utilized. The vulnerability arises in the svc_rpc_gss_validate() function, which improperly reconstructs an RPC header into a 128-byte stack buffer for GSS-API signature verification.
Summary from github.com.
Reports
One report so far. Additional coverage will appear here when it is linked to this story.
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · github.com
Hacker News discussion ↗
Historical count: 5 · 5 saved in sample · Historical sample
Analysis ready
Read this discussion’s reaction
Based on 5 sampled comments from this thread. Analyzed 2026-04-01.
- Praise: The ability of Claude to generate a full exploit demonstrates the growing capabilities of LLMs in understanding and manipulating complex systems, which could have significant implications for cybersecurity.
- Concern: Claude did not independently discover the vulnerability, raising concerns about the reliance on AI for proactive security measures rather than reactive ones.
- Concern: The lack of KASLR in FreeBSD 14.x highlights potential weaknesses in its security architecture, which could be exploited by AI-generated exploits.