CVE-2026-44942

libzypp .repo files can have an optional path which can lead to path traversal attacks

State: Published
Severity: 6.5 Medium
Published: Jun 18, 2026
Updated: Jun 18, 2026
Reserved: May 8, 2026

Description

A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill directories on the system outside of the zypp cache with content.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	suse

Weaknesses

CWE-24 Path traversal: '../filedir'

Affected Products

Product	Versions
libzyppSUSE	17.0.0 to before 17.38.13Affected before 16.22.19Affected

References

https://bugzilla.suse.com/show_bug.cgi?id=1267874issue-tracking
https://www.suse.com/security/cve/CVE-2026-44942.htmlvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.