Vulnerability Description
The Sleuth Kit through 4.14.0 contains a path traversal vulnerability in tsk_recover that allows an attacker to write files to arbitrary locations outside the intended recovery directory via crafted filenames or directory paths with path traversal sequences in a filesystem image. An attacker can craft a malicious filesystem image with embedded /../ sequences in filenames that, when processed by tsk_recover, writes files outside the output directory, potentially achieving code execution by overwriting shell configuration or cron entries.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sleuthkit | The Sleuth Kit | < 4.15.0 |
Related Weaknesses (CWE)
References
- https://github.com/sleuthkit/sleuthkit/commit/a3f96b3bc36a8bb1a00c297f77110d4a6ePatch
- https://mobasi.ai/sentinelThird Party Advisory
- https://www.vulncheck.com/advisories/sleuth-kit-tsk-recover-path-traversalThird Party Advisory
FAQ
What is CVE-2026-40024?
CVE-2026-40024 is a vulnerability with a CVSS score of 7.1 (HIGH). The Sleuth Kit through 4.14.0 contains a path traversal vulnerability in tsk_recover that allows an attacker to write files to arbitrary locations outside the intended recovery directory via crafted f...
How severe is CVE-2026-40024?
CVE-2026-40024 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-40024?
Check the references section above for vendor advisories and patch information. Affected products include: Sleuthkit The Sleuth Kit.