CVE-2026-84233
Fixed in a distro release EPSS <1%CVSS 7.0
A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a user or automated workflow invokes `rpmuncompress -x` on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary commands with the privileges of the invoking account, leading to a compromise of confidentiality, integrity, and availability.
Products: Red Hat Hardened Images, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rpm | no fix |
| Debian 13 | rpm | no fix |
| Debian 14 | rpm | no fix |
| Red Hat hummingbird 1 | python3-rpm | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-apidocs | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-build | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-build-libs | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-cron | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-devel | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-libs | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-audit | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-dbus-announce | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-fapolicyd | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-fsverity | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-ima | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-prioreset | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-selinux | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-syslog | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-systemd-inhibit | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-unshare | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-sign | 0:6.1.0-1.hum1 |
| Red Hat hummingbird 1 | rpm-sign-libs | 0:6.1.0-1.hum1 |
| Ubuntu 22.04 LTS | rpm | no fix |
| Ubuntu 24.04 LTS | rpm | no fix |
| Ubuntu 26.04 LTS | rpm | no fix |
| Ubuntu 26.10 | rpm | no fix |
| Ubuntu Pro 14.04 LTS | rpm | no fix |
| Ubuntu Pro 16.04 LTS | rpm | no fix |
| Ubuntu Pro 18.04 LTS | rpm | no fix |
| Ubuntu Pro 20.04 LTS | rpm | no fix |