Path Traversal Vulnerability in SUSE's libzypp Affects System Directories

CVE-2026-44942

What is CVE-2026-44942?

A vulnerability in the handling of the 'path' component within .repo files processed by SUSE's libzypp can allow attackers to manipulate the system's directory structure. This flaw permits unauthorized write access to directories outside the zypp cache, potentially allowing malicious actors to place arbitrary content in sensitive areas of the file system. Proper measures should be taken to ensure systems running affected versions of libzypp are protected from exploitation.

References