CVE-2026-25707

Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp

State: Published
Severity: 8.8 High
Published: Jun 29, 2026
Updated: Jun 30, 2026
Reserved: Feb 5, 2026

Description

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading to denial of service or privilege escalation.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	suse

Weaknesses

CWE-23 Relative path traversal

Affected Products

Product	Versions
libzyppSUSE	before 17.38.10Affected

References

https://bugzilla.suse.com/show_bug.cgi?id=1259802issue-tracking
https://github.com/openSUSE/libzypp/commit/f09feda7fca03c941218aab0bb161cc82b185b6bpatch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.