Beveiligingsadvies

CVE-2026-54230

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-13 02:34:35

Laatst bijgewerkt 2026-08-13 12:04:28

Toegewezen door redhat

CVSS-score 7.0

Status PUBLISHED

Beschrijving

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and writes content to the symlink target, allowing arbitrary file overwrites on the system.

← Alle CVE's bekijken Bekijk op cve.org ↗