VulnSocial

CVE-2026-54230Disclosure(fedoraproject / automatic_bug_reporting_tool)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch fedoraproject automatic_bug_reporting_tool systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and writes content to the symlink target, allowing arbitrary file overwrites on the system.

fedoraproject CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • automatic_bug_reporting_tool
  • enterprise_linux
  • fedora

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 2d ago at 1 mentions (2026-06-14); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
fedoraprojectredhat
Products
automatic_bug_reporting_toolenterprise_linuxfedora

4 versions affected across 3 products

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-14: 1Mentions · 2026-06-15: 1Mentions · 2026-06-29: 1Patch / Workaround · 2026-06-15: 1Technical Details · 2026-06-14: 1Technical Details · 2026-06-15: 1Technical Details · 2026-06-29: 106-1406-1506-29
Signal classification1 categories
Disclosure
3100.0%
Referenced assets1 URL
By indicator
Full discourse3 posts
  • DFIR Lab@DFIR_Lab
    Disclosure

    🚨 HIGH: CVE-2026-54230 - CVSS 7.0 Symlink following vuln in ABRT/libreport allows arbitrary file overwrites as root. Event scripts lack O_NOFOLLOW flag. Affected: libreport (Linux) Impact: Privilege escalation #CVE #Vulnerability #PatchNow https://t.co/cYx3h4LS0X

    Post summary

    This tweet discloses CVE‑2026‑54230, a high‑severity symlink following flaw in libreport that permits root‑level file overwrites, with a CVSS score of 7.0.

    0000042
    54 followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    #CVE-2026-54230 - #Arbitrary file overwrite via symlink attack in libreport's #ABRT event scripts. #CVSS 7.0. Unpatched. Restrict access or monitor immediately. #CVE #infosec #cybersecurity #devops #devsecops #linux #ubuntu More info: https://www.valtersit.com/cve/CVE-2026-54230

    Post summary

    The tweet announces CVE‑2026‑54230, gives technical details and CVSS, notes it is unpatched, and advises restricting access or monitoring.

    0000030
    929 followersView on X
  • NerdieNews@NewsNerdie
    Disclosure

    CVE-2026-54230 - Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites #NerdieNews #CyberSecurity #InfoSec https://t.co/SkPcuSwhpd

    Post summary

    The tweet announces CVE-2026-54230, describing a symlink-based arbitrary file overwrite flaw, but includes no PoC, exploit, patch, or evidence of real‑world attacks.

    0000031
    65 followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
OSfedoraprojectfedora43--
OSfedoraprojectfedora44--
Appredhatautomatic_bug_reporting_tool---
OSredhatenterprise_linux7.0--
OSredhatenterprise_linux8.0--

Explore more

Back to dashboardfedoraproject CVEsredhat CVEsautomatic_bug_reporting_tool vulnerabilities