Catálogo de CVE

CVE-2026-5958

When sed is invoked with both -i (in-place edit) and…

When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the same path: 1. resolves symlink to its target and stores the resolved path for determining when output is written, 2. opens the original symlink path (not the resolved one) to read the file. Between these two calls there is a race window. If an attacker atomically replaces the symlink with a different target during that window, sed will: read content from the new (attacker-chosen) symlink target and write the processed result to the path recorded in step 1. This can lead to arbitrary file overwrite with attacker-controlled content in the context of the sed process. This issue was fixed in version 4.10.

Gravedad: Medium · CVSS 6.9CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
Published: Apr 19, 2026, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.14% · Oct 27, 2026

Projects and upstream resources

[sed][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie	sed	`4.9-2+deb13u1`	FixedDistribution-reported fixed boundary	[CVE-2026-5958]
Debiansid	sed	`4.9-3`	FixedDistribution-reported fixed boundary	[CVE-2026-5958]
Debianforky	sed	`4.9-3`	FixedDistribution-reported fixed boundary	[CVE-2026-5958]
Debianbookworm	sed	`4.9-1+deb12u1`	FixedDistribution-reported fixed boundary	[CVE-2026-5958]

Showing 4 fix observations. All 28 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	sed	`4.9-1+deb12u1`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	sed	`4.9-2ubuntu0.24.04.1`	UnknownSource applicability is not established	Provider not reported
Debianbookworm	sed	`4.9-1+deb12u1`	FixedDistribution-reported fixed boundary	[CVE-2026-5958]
Debianforky	sed	`4.9-3`	FixedDistribution-reported fixed boundary	[CVE-2026-5958]
Debiansid	sed	`4.9-3`	FixedDistribution-reported fixed boundary	[CVE-2026-5958]
Debiantrixie	sed	`4.9-2+deb13u1`	FixedDistribution-reported fixed boundary	[CVE-2026-5958]
Opensuseleap 16.0	sed	`4.9-160000.3.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2026:21024-1]Jun 30, 2026, 6:24:37 PM UTC
Opensusetumbleweed	sed	`4.10-1.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2026:10649-1]Apr 29, 2026, 8:02:25 AM UTC
Suselinux enterprise server 16.0	sed	`4.9-160000.3.1`	UnknownSource applicability is not established	[SUSE-SU-2026:22325-1]Jul 2, 2026, 6:24:10 PM UTC
Suselinux enterprise server for sap applications 16.0	sed	`4.9-160000.3.1`	UnknownSource applicability is not established	[SUSE-SU-2026:22325-1]Jul 2, 2026, 6:24:10 PM UTC
Suselinux micro 6.2	sed	`4.9-160000.3.1`	UnknownSource applicability is not established	[SUSE-SU-2026:22256-1]Jun 30, 2026, 6:24:26 PM UTC
Ubuntu22.04	sed	`4.7-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu22.04	sed	`4.7-1ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu22.04	sed	`4.8-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu22.04	sed	`4.8-1ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu22.04	sed	`4.8-1ubuntu2.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu24.04	sed	`4.9-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu24.04	sed	`4.9-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu24.04	sed	`4.9-2build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu24.04	sed	`4.9-2ubuntu0.24.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu25.10	sed	`4.9-2build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu25.10	sed	`4.9-2build2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu25.10	sed	`4.9-2ubuntu0.25.10.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu26.04	sed	`4.9-2build2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu26.04	sed	`4.9-2build3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntu26.04	sed	`4.9-2ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC[USN-8229-1]May 20, 2026, 4:04:03 PM UTC
Ubuntupro	sed	`4.7-1`	UnknownSource applicability is not established	[USN-8229-2]May 29, 2026, 10:59:19 AM UTC[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC
Ubuntupro	sed	`4.7-1ubuntu0.1~esm1`	UnknownSource applicability is not established	[USN-8229-2]May 29, 2026, 10:59:19 AM UTC[UBUNTU-CVE-2026-5958]May 29, 2026, 10:59:18 AM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "sed",
      "status": "fixed",
      "release": "sid",
      "version": "4.9-3"
    },
    {
      "name": "sed",
      "status": "fixed",
      "release": "forky",
      "version": "4.9-3"
    },
    {
      "name": "sed",
      "status": "fixed",
      "release": "trixie",
      "version": "4.9-2+deb13u1"
    },
    {
      "name": "sed",
      "status": "fixed",
      "release": "bookworm",
      "version": "4.9-1+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1134495,
      "name": "sed",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "4.9-3"
    },
    {
      "bug": 1134495,
      "name": "sed",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "4.9-3"
    },
    {
      "bug": 1134495,
      "name": "sed",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "4.9-2+deb13u1"
    },
    {
      "bug": 1134495,
      "name": "sed",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "4.9-1+deb12u1"
    }
  ],
  "distribution_packages": [
    {
      "name": "sed",
      "fixed_version": "4.9-2ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "fixed_version": "4.9-1+deb12u1",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.9-160000.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:22325-1",
      "fixed_version": "4.9-160000.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:22325-1",
      "provider_updated_at": "2026-07-02T18:24:10.966684892Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.9-160000.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:22325-1",
      "fixed_version": "4.9-160000.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:22325-1",
      "provider_updated_at": "2026-07-02T18:24:10.966684892Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.9-160000.3.1"
            }
          ]
        }
      ],
      "release": "leap 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2026:21024-1",
      "fixed_version": "4.9-160000.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2026:21024-1",
      "provider_updated_at": "2026-06-30T18:24:37.091787230Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.9-160000.3.1"
            }
          ]
        }
      ],
      "release": "linux micro 6.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:22256-1",
      "fixed_version": "4.9-160000.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:22256-1",
      "provider_updated_at": "2026-06-30T18:24:26.452059683Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.7-1ubuntu0.1~esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "4.7-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-8229-2",
      "fixed_version": "4.7-1ubuntu0.1~esm1",
      "provider_source": "pypi",
      "provider_record_id": "USN-8229-2",
      "provider_updated_at": "2026-05-29T10:59:19.228985104Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.7-1ubuntu0.1~esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "4.7-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-5958",
      "fixed_version": "4.7-1ubuntu0.1~esm1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-5958",
      "provider_updated_at": "2026-05-29T10:59:18.893969563Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.8-1ubuntu2.1"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "4.7-1ubuntu1",
        "4.7-1ubuntu2",
        "4.8-1ubuntu1",
        "4.8-1ubuntu2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-5958",
      "fixed_version": "4.8-1ubuntu2.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-5958",
      "provider_updated_at": "2026-05-29T10:59:18.893969563Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.9-2ubuntu0.24.04.1"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "4.9-1",
        "4.9-2",
        "4.9-2build1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-5958",
      "fixed_version": "4.9-2ubuntu0.24.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-5958",
      "provider_updated_at": "2026-05-29T10:59:18.893969563Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.9-2ubuntu0.25.10.1"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "4.9-2build1",
        "4.9-2build2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-5958",
      "fixed_version": "4.9-2ubuntu0.25.10.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-5958",
      "provider_updated_at": "2026-05-29T10:59:18.893969563Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.9-2ubuntu1"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "4.9-2build2",
        "4.9-2build3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-5958",
      "fixed_version": "4.9-2ubuntu1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-5958",
      "provider_updated_at": "2026-05-29T10:59:18.893969563Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.8-1ubuntu2.1"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "4.7-1ubuntu1",
        "4.7-1ubuntu2",
        "4.8-1ubuntu1",
        "4.8-1ubuntu2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-8229-1",
      "fixed_version": "4.8-1ubuntu2.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-8229-1",
      "provider_updated_at": "2026-05-20T16:04:03.111048743Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.9-2ubuntu0.24.04.1"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "4.9-1",
        "4.9-2",
        "4.9-2build1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-8229-1",
      "fixed_version": "4.9-2ubuntu0.24.04.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-8229-1",
      "provider_updated_at": "2026-05-20T16:04:03.111048743Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.9-2ubuntu0.25.10.1"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "4.9-2build1",
        "4.9-2build2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-8229-1",
      "fixed_version": "4.9-2ubuntu0.25.10.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-8229-1",
      "provider_updated_at": "2026-05-20T16:04:03.111048743Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.9-2ubuntu1"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "4.9-2build2",
        "4.9-2build3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-8229-1",
      "fixed_version": "4.9-2ubuntu1",
      "provider_source": "pypi",
      "provider_record_id": "USN-8229-1",
      "provider_updated_at": "2026-05-20T16:04:03.111048743Z",
      "applicability_unknown": true
    },
    {
      "name": "sed",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.10-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2026:10649-1",
      "fixed_version": "4.10-1.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2026:10649-1",
      "provider_updated_at": "2026-04-29T08:02:25.328263Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1134495]

OpenFactory catalog packages

La asociación de paquetes está en curso.

[Debian 12 (Bookworm)]

[sed]Desconocido
Detalles (2)
- 4.9-1+deb12u1 · amd64 · bookworm
  Corregida · Corregida: 4.9-1+deb12u1
  nvd · sed · debian · bookworm; nvd · sed · debian · 12
- 4.9-1+deb12u1 · arm64 · bookworm
  Corregida · Corregida: 4.9-1+deb12u1
  nvd · sed · debian · bookworm; nvd · sed · debian · 12

[Debian 13 (Trixie)]

[sed]Desconocido
Detalles (2)
- 4.9-2+deb13u1 · amd64 · trixie
  Corregida · Corregida: 4.9-2+deb13u1
  nvd · sed · debian · 13
- 4.9-2+deb13u1 · arm64 · trixie
  Corregida · Corregida: 4.9-2+deb13u1
  nvd · sed · debian · 13

[openSUSE Tumbleweed]

[sed]Desconocido
Paquete fuente: [sed]
Detalles (1)
- 4.10-1.4 · x86_64 · tumbleweed
  Corregida · Corregida: 4.10-1.1
  nvd · sed · opensuse · tumbleweed
[sed-lang]Desconocido
Paquete fuente: [sed]
Detalles (1)
- 4.10-1.4 · noarch · tumbleweed
  Desconocido · Corregida: 4.10-1.1
  Version impact unknown
  nvd · sed · opensuse · tumbleweed

Observado: Oct 23, 2026, 10:32:47 PM UTC

Referencias

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]