CVE-2026-54230

HighCVSS 7.0

Published: 13/06/2026(UTC)Updated: 26/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Vulnerability in ABRT event handler scripts in the libreport library allows arbitrary file overwrites on the system. Scripts write data to files without the O_NOFOLLOW flag, allowing a root process to follow symbolic links.

Risk Assessment

An attacker could overwrite arbitrary system files, potentially leading to privilege escalation or permanent system damage.

Recommendation

It is recommended to update the libreport library to a version containing the fix.

Other vulnerabilities in libreport

CVE-2026-54231Medium
In the libreport tool used in ABRT (Automatic Bug Reporting Tool), a content injection vulnerability was found. The post-create event script reads the systemd journal and writes results to files in the dump directory without sanitizing control characters. A local user can inject arbitrary content by embedding newline characters in syslog messages.

Original NVD description (English source)

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and writes content to the symlink target, allowing arbitrary file overwrites on the system.