7.8
Élevée
CVE-2026-44933 `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root)…
Description
`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed path to execute host binaries (like `/bin/bash`) with root privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 17.38 | 17.38.8 → < 17.38.9 | 17.38.9 |
| openSUSE 17.38 | 17.38.8 → < 17.38.9 | 17.38.9 |