What’s Vulnerable › Vulnerabilities

CVE-2026-44941: libzypp path traversal via "keyhint" in repomd.xml

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-07-02 · updated 2026-10-25
• Weakness: CWE-23

Description

A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply a malicious repository to inject or overwrite files in the target system as root.

Affected products

• SUSE libzypp: before 17.38.12 — fixed in 17.38.12

How to fix

Upgrade to a fixed version: SUSE libzypp 17.38.12. Check the vendor advisory for mitigations.

References

• https://bugzilla.suse.com/show_bug.cgi?id=1267426
• https://github.com/openSUSE/libzypp/commit/294b1bad442d089ca671c5c03adc8031e3b29e04

Get alerted when CVE-2026-44941 or the next vulnerability affects your stack