CVE-2026-77113

Vulnerability Description

Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in crash report files.

Related Weaknesses (CWE)

CWE-23

References

https://github.com/canonical/apport/pull/646
https://launchpad.net/bugs/2161697

FAQ

What is CVE-2026-77113?

CVE-2026-77113 is a documented vulnerability. Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via a...

How severe is CVE-2026-77113?

CVSS scoring is not yet available for CVE-2026-77113. Check NVD for updates.

Is there a patch for CVE-2026-77113?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.