7.8
High
CVE-2026-44933 `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root)…
Description
`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed path to execute host binaries (like `/bin/bash`) with root privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 17.38 | 17.38.8 → < 17.38.9 | 17.38.9 |
| openSUSE 17.38 | 17.38.8 → < 17.38.9 | 17.38.9 |