CVE-2026-77113CWE-23

CVE-2026-77113

published August 21, 2026

CVSS
6.7
EPSS
0%
Percentile
8.9
In the wild
Unconfirmed
What it is

Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in crash report files.

The record
Technical detail
CVSS
6.7 · NONE
CVSS v4.0
6.7 · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00197 · 8.9th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2026-08-21T03:16Z
References (2)
https://github.com/canonical/apport/pull/646 · [email protected]https://launchpad.net/bugs/2161697 · [email protected]
EPSS history
Timeline
  • 20 AUG 22:32Z
    Path Traversal Vulnerability in apport-unpack
    cvelistv5