CVE catalog

CVE-2026-79655

UBUNTU-CVE-2026-79655

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.21% · Oct 25, 2026

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink targets are not properly validated. This enables the attacker to write files to arbitrary locations on the system with the privileges of the sos clean process, which often runs as root.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansos134.10.0-1vulnerable
Debiansos134.10.0-1~bpo12+1vulnerable
Debiansos134.10.0-1~bpo13+1vulnerable
Debiansos134.10.1-1vulnerable
Debiansos134.10.1-1~bpo12+1vulnerable
Debiansos134.10.1-1~bpo13+1vulnerable
Debiansos134.10.2-1vulnerable
Debiansos134.10.2-1+really4.9.1-1~bpo12+1vulnerable
Debiansos134.10.2-1~bpo12+1vulnerable
Debiansos134.10.2-1~bpo13+1vulnerable
Debiansos134.11.0-1vulnerable
Debiansos134.11.1-1vulnerable
Debiansos134.11.1-2vulnerable
Debiansos134.11.1-2~bpo13+1vulnerable
Debiansos134.11.2-1vulnerable
Debiansos134.11.2-1~bpo13+1vulnerable
Debiansos134.12.0-1vulnerable
Debiansos134.12.0-1~bpo13+1vulnerable
Debiansos134.12.0-2vulnerable
Debiansos134.9.1-1vulnerable
Debiansos134.9.2-1vulnerable
Debiansos134.9.2-2vulnerable
Debiansos134.9.2-3vulnerable
Debiansos144.10.0-1vulnerable
Debiansos144.10.0-1~bpo12+1vulnerable
Debiansos144.10.0-1~bpo13+1vulnerable
Debiansos144.10.1-1vulnerable
Debiansos144.10.1-1~bpo12+1vulnerable
Debiansos144.10.1-1~bpo13+1vulnerable
Debiansos144.10.2-1vulnerable
Debiansos144.10.2-1+really4.9.1-1~bpo12+1vulnerable
Debiansos144.10.2-1~bpo12+1vulnerable
Debiansos144.10.2-1~bpo13+1vulnerable
Debiansos144.11.0-1vulnerable
Debiansos144.11.1-1vulnerable
Debiansos144.11.1-2vulnerable
Debiansos144.11.1-2~bpo13+1vulnerable
Debiansos144.11.2-1vulnerable
Debiansos144.11.2-1~bpo13+1vulnerable
Debiansos144.12.0-1vulnerable
Debiansos144.12.0-1~bpo13+1vulnerable
Debiansos144.9.1-1vulnerable
Debiansos144.9.2-1vulnerable
Debiansos144.9.2-2vulnerable
Debiansos144.9.2-3vulnerable
Debiansos144.12.0-2fixed
Ubuntusosreportpro3.6-1ubuntu3vulnerable
Ubuntusosreportpro3.8-1ubuntu1vulnerable
Ubuntusosreportpro3.8-1ubuntu2vulnerable
Ubuntusosreportpro3.8-1ubuntu3vulnerable
Ubuntusosreportpro3.9-1ubuntu1vulnerable
Ubuntusosreportpro3.9-1ubuntu2vulnerable
Ubuntusosreportpro3.9-1ubuntu2.1vulnerable
Ubuntusosreportpro3.9.1-1ubuntu0.20.04.1vulnerable
Ubuntusosreportpro3.9.1-1ubuntu0.20.04.2vulnerable
Ubuntusosreportpro4.0-1~ubuntu0.20.04.1vulnerable
Ubuntusosreportpro4.0-1~ubuntu0.20.04.2vulnerable
Ubuntusosreportpro4.0-1~ubuntu0.20.04.3vulnerable
Ubuntusosreportpro4.1-1ubuntu0.20.04.1vulnerable
Ubuntusosreportpro4.1-1ubuntu0.20.04.2vulnerable
Ubuntusosreportpro4.1-1ubuntu0.20.04.3vulnerable
Ubuntusosreportpro4.2-1ubuntu0.20.04.1vulnerable
Ubuntusosreportpro4.3-1ubuntu0.20.04.1vulnerable
Ubuntusosreportpro4.3-1ubuntu0.20.04.2vulnerable
Ubuntusosreportpro4.4-1ubuntu0.20.04.1vulnerable
Ubuntusosreportpro4.5.6-0ubuntu1~20.04.1vulnerable
Ubuntusosreportpro4.5.6-0ubuntu1~20.04.2vulnerable
Ubuntusosreportpro4.7.2-0ubuntu1~20.04.1vulnerable
Ubuntusosreportpro4.7.2-0ubuntu1~20.04.2vulnerable
Ubuntusosreportpro4.8.2-0ubuntu0~20.04.1vulnerable
Ubuntusosreportpro4.11.1-0ubuntu0.20.04.1~esm1vulnerable
Ubuntusosreport22.044.1-1ubuntu2vulnerable
Ubuntusosreport22.044.1-1ubuntu3vulnerable
Ubuntusosreport22.044.2-1ubuntu2vulnerable
Ubuntusosreport22.044.3-1ubuntu1vulnerable
Ubuntusosreport22.044.3-1ubuntu2vulnerable
Ubuntusosreport22.044.3-1ubuntu2.1vulnerable
Ubuntusosreport22.044.4-1ubuntu1.22.04.1vulnerable
Ubuntusosreport22.044.5.6-0ubuntu1~22.04.1vulnerable
Ubuntusosreport22.044.5.6-0ubuntu1~22.04.2vulnerable
Ubuntusosreport22.044.7.2-0ubuntu1~22.04.1vulnerable
Ubuntusosreport22.044.7.2-0ubuntu1~22.04.2vulnerable
Ubuntusosreport22.044.8.2-0ubuntu0~22.04.1vulnerable
Ubuntusosreport22.044.8.2-0ubuntu0~22.04.2vulnerable
Ubuntusosreport22.044.9.2-0ubuntu0~22.04.1vulnerable
Ubuntusosreport22.044.10.2-0ubuntu0~22.04.1vulnerable
Ubuntusosreport22.044.11.2-0ubuntu0~22.04.1vulnerable
Ubuntusosreport24.044.5.6-0ubuntu2vulnerable
Ubuntusosreport24.044.5.6-0ubuntu4vulnerable
Ubuntusosreport24.044.7.2-0ubuntu1~24.04.1vulnerable
Ubuntusosreport24.044.7.2-0ubuntu1~24.04.2vulnerable
Ubuntusosreport24.044.8.2-0ubuntu0~24.04.1vulnerable
Ubuntusosreport24.044.8.2-0ubuntu0~24.04.2vulnerable
Ubuntusosreport24.044.9.2-0ubuntu0~24.04.1vulnerable
Ubuntusosreport24.044.10.2-0ubuntu0~24.04.1vulnerable
Ubuntusosreport24.044.11.2-0ubuntu0~24.04.1vulnerable
Ubuntusos26.104.10.2-1vulnerable
Ubuntusos26.104.11.1-2vulnerable
Ubuntusos26.104.11.2-1vulnerable
Ubuntusos26.044.10.0-1vulnerable
Ubuntusos26.044.10.1-1vulnerable
Ubuntusos26.044.10.2-1vulnerable
Ubuntusos26.044.11.2-0ubuntu0.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansosdeb144.12.0-2Not reportedDEBIAN-CVE-2026-79655Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [sos]Affected
    Details (4)

    • 4.9.1-1 · all · trixie

      Affected

      pypi · sos · debian · 13

    • 4.9.1-1 · all · trixie

      Affected

      pypi · sos · debian · 13

    • 4.11.2-1~bpo13+1 · all · trixie-backports

      Affected

      pypi · sos · debian · 13

    • 4.11.2-1~bpo13+1 · all · trixie-backports

      Affected

      pypi · sos · debian · 13

  • [sosreport]Affected

    Source package: [sos]

    Details (4)

    • 4.9.1-1 · all · trixie

      Affected

      pypi · sos · debian · 13

    • 4.9.1-1 · all · trixie

      Affected

      pypi · sos · debian · 13

    • 4.11.2-1~bpo13+1 · all · trixie-backports

      Affected

      pypi · sos · debian · 13

    • 4.11.2-1~bpo13+1 · all · trixie-backports

      Affected

      pypi · sos · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]