A flaw was found in abrt. The abrt-server helper, spawned as root for connections to the world-writable abrt.socket, accepts a client-supplied PID= value and uses it to harvest /proc/<pid> data (including environ) into a problem dump owned by the connecting user's uid from SO_PEERCRED, without verifying that the target process belongs to that user. A local unprivileged attacker can thereby obtain environment variables and related process metadata of other users' or root processes when abrtd is running.