THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-54230 (HIGH 7.0) — A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows

[NVD] CVE-2026-54230 (HIGH 7.0) — A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows

lownvdPublished 2026-06-13

CVE-2026-54230 CVSS: 7.0 HIGH Published: 2026-06-13T03:16:21.733

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and writes content to the symlink target,

Indicators of compromise

CVE-2026-54230cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-54230