CVE-2026-85518
Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition
A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target directory with the permissions of the executing process.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition
A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target directory with the permissions of the executing process.
- Record
CVE-2026-85518- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L - Weakness
- CWE-22
- Updated
- 2026-11-06
EUVDEUVD-2026-107542
A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target directory with the permissions of the executing process.
- Record
EUVD-2026-107542- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L - Updated
- 2026-11-06
GitHub AdvisoriesGHSA-vp9g-975v-q4cm
A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application...
A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target directory with the permissions of the executing process.
- Record
GHSA-vp9g-975v-q4cm- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L - Weakness
- CWE-22
- Updated
- 2026-11-02
NVD
A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target directory with the permissions of the executing process.
- Record
CVE-2026-85518- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L - Weakness
- CWE-22
- Updated
- 2026-11-06
OSVDEBIAN-CVE-2026-85518
A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target directory with the permissions of the executing process.
- Record
DEBIAN-CVE-2026-85518- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L - Updated
- 2026-11-02
OSVopenSUSE-SU-2026:12249-1 No score
libopenscap33-1.4.6-1.1 on GA media
These are all security issues fixed in the libopenscap33-1.4.6-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12249-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openscapDebian:12 |
All versions, plus listed versions 1.3.10+dfsg-11.3.10+dfsg-21.3.10+dfsg-31.3.7+dfsg-11.3.7+dfsg-1+deb12u1 Show 17 moreShow less1.3.8+dfsg-11.3.8+dfsg-21.3.8+dfsg-31.3.9+dfsg-11.3.9+dfsg-1.11.3.9+dfsg-1.1~exp11.3.9+dfsg-21.4.0+dfsg-11.4.0+dfsg-21.4.1+dfsg-11.4.2+dfsg-11.4.2+dfsg-21.4.3+dfsg-11.4.4+dfsg-11.4.4+dfsg-21.4.5+dfsg-11.4.6+dfsg-1 |
None known |
openscapDebian:13 |
All versions, plus listed versions 1.4.2+dfsg-11.4.2+dfsg-21.4.3+dfsg-11.4.4+dfsg-11.4.4+dfsg-21.4.5+dfsg-11.4.6+dfsg-1 |
None known |
openscapDebian:14 |
before 1.4.6+dfsg-1, plus listed versions 1.4.2+dfsg-11.4.2+dfsg-21.4.3+dfsg-11.4.4+dfsg-11.4.4+dfsg-21.4.5+dfsg-1 |
1.4.6+dfsg-1 |
openscapopenSUSE:Tumbleweed |
before 1.4.6-1.1 | 1.4.6-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | EUVD | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-85518 is a medium vulnerability (CVSS 6.1) in Red Hat Enterprise Linux 10, published October 21, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in openscap 1.4.6+dfsg-1.