Path Traversal Vulnerability in Sleuth Kit Affects Cybersecurity Operations

CVE-2026-40024

What is CVE-2026-40024?

The Sleuth Kit, up to version 4.14.0, is impacted by a path traversal vulnerability in its tsk_recover component. This issue enables an attacker to exploit crafted filenames or directory paths containing traversal sequences, potentially allowing files to be written to arbitrary locations outside the designated recovery directory. By manipulating a filesystem image with embedded /../ sequences, an attacker can target the output directory, which may lead to unauthorized code execution, including the alteration of shell configurations or cron entries.

References