Description

A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply a malicious repository to inject or overwrite files in the target system as root.

Related CPE's

a

opensuse

libzypp

Vulnerable

References

https://bugzilla.suse.com/show_bug.cgi?id=1267426

ExploitThird Party Advisory

https://github.com/openSUSE/libzypp/commit/294b1bad442d089ca671c5c03adc8031e3b29e04

Patch

Weaknesses

[email protected]

Secondary
CWE-23

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

8.4 · High

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-07-02T16:16:30.550Z

3 months ago

Last modified

2026-07-07T17:27:50.640Z

3 months ago