CVE-2026-24909 - CERT CVE

  1. CVE-2026-24909

ID CVE-2026-24909
Sažetak vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction.
Reference
CVSS
Base: 5.9
Impact: 4.0
Exploitability:1.4
Pristup
VektorSloženostAutentikacija
LOCAL HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE HIGH NONE
CVSS vektor CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Zadnje važnije ažuriranje 29-01-2026 - 16:31
Objavljeno 27-01-2026 - 23:15