CVE-2026-84838
Fixed in a distro release EPSS 1%CVSS 7.8
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell command strings. Successful exploitation requires user interaction, where a user or automated workflow invokes rpmuncompress on the malicious file, leading to high impact on the confidentiality, integrity, and availability of data accessible to the invoking user.
Products: Red Hat Hardened Images, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rpm | no fix |
| Debian 13 | rpm | no fix |
| Debian 14 | rpm | no fix |
| Red Hat hummingbird 1 | python3-rpm | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-apidocs | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-build | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-build-libs | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-cron | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-devel | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-libs | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-audit | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-dbus-announce | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-fapolicyd | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-fsverity | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-ima | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-prioreset | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-selinux | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-syslog | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-systemd-inhibit | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-plugin-unshare | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-sign | 0:6.1.0-1.3.hum1 |
| Red Hat hummingbird 1 | rpm-sign-libs | 0:6.1.0-1.3.hum1 |
| Ubuntu 22.04 LTS | rpm | no fix |
| Ubuntu 24.04 LTS | rpm | no fix |
| Ubuntu 26.04 LTS | rpm | no fix |
| Ubuntu 26.10 | rpm | no fix |
| Ubuntu Pro 14.04 LTS | rpm | no fix |
| Ubuntu Pro 16.04 LTS | rpm | no fix |
| Ubuntu Pro 18.04 LTS | rpm | no fix |
| Ubuntu Pro 20.04 LTS | rpm | no fix |