Breaking

Anthropic Researchers Build Working Exploit for Critical Linux Kernel Flaw Affecting MPTCP Servers

October 30, 2026 at 17:41 EDT

Security

Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to execute commands remotely with root privileges on servers running Multipath TCP (MPTCP) listeners.

Linux kernel · Critical vulnerability · Working exploit

A remote, no-login kernel flaw now has a working exploit

Security researchers at Anthropic built an exploit for a critical Linux kernel bug in Multipath TCP (MPTCP) listeners. A successful attack grants root control of the affected server.

From flaw to root access

How the reported attack path reads, step by step

STEP 1

Reach the listener

Exposed MPTCP listener on the network

→

STEP 2

No credentials needed

Unauthenticated attacker can trigger the flaw

→

STEP 3

Run commands

Commands execute remotely

→

STEP 4

Root control

Highest privilege on the machine

Why the severity is critical

Any reachable vulnerable server could be taken over, with no login required.

Condition 1

The server runs an MPTCP listener

Condition 2

That listener is exposed to a network

Condition 3

No login or credentials are needed to attack

What the exploit signals

A working attack moves the flaw from theory to practice.
Threat actors often act quickly once an attack method is known.
Administrators should prioritize updates once fixes arrive.

What remains unclear

The specific code path involved
The affected kernel versions
Whether patches have been released
How fast maintainers and distributions respond

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.