CVEvulnerability

CVE-2026-44942

6.5 MEDIUM Published 2026-06-18 Modified 2026-10-26 Official page ↗
Status
Awaiting Analysis
Published
2026-06-18
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-24

Description

A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill directories on the system outside of the zypp cache with content.

Related

Weakness · CWE (1)

  • CWE-24 Path Traversal: '../filedir' weakness

References