CVE-2026-54231

MediumCVSS 5.5

Published: 13/06/2026(UTC)Updated: 26/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

In the libreport tool used in ABRT (Automatic Bug Reporting Tool), a content injection vulnerability was found. The post-create event script reads the systemd journal and writes results to files in the dump directory without sanitizing control characters. A local user can inject arbitrary content by embedding newline characters in syslog messages.

Risk Assessment

The risk is that a local user can control the content written by root to dump directory files, potentially leading to privilege escalation or data manipulation.

Recommendation

It is recommended to update libreport to a version containing the fix that adds sanitization of control characters before writing to files.

Other vulnerabilities in libreport

CVE-2026-54230High
Vulnerability in ABRT event handler scripts in the libreport library allows arbitrary file overwrites on the system. Scripts write data to files without the O_NOFOLLOW flag, allowing a root process to follow symbolic links.

Original NVD description (English source)

A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log entries matching the crashed process and writes the results to files in the dump directory without sanitizing embedded control characters. A local user can inject arbitrary content into the journal output by embedding newline characters in syslog messages, controlling the content that root writes to dump directory files.