NexaPulse
Subscribe
7.0highHigh

CVE-2026-54230

Redhat Automatic Bug Reporting Tool

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and writes content to the symlink target, allowing arbitrary file overwrites on the system.

Exploitation status

  • A vendor advisory or patch reference has been published.

What the metrics mean

  • It is requires local access to the machine.
  • For an attacker who can reach it, exploitation depends on conditions outside the attacker's control.
  • To exploit it, an ordinary user account is needed.
  • Beyond that, no action by a user is required.

Scoring

CVSS
7.0 (v3.1)
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-59
Assigned by
secalert@redhat.com

Dates

Published
2026-06-13
Last modified
2026-08-26
Sources
NVD

Affected products

  • Redhat Automatic Bug Reporting Toolall versions
  • Fedoraproject Fedora43, 44
  • Redhat Enterprise Linux7.0, 8.0

As listed in the NVD configuration data. Not a statement about your estate.

References