Symlink Traversal Vulnerability in attr Utilities by Savannah

CVE-2026-54371

What is CVE-2026-54371?

The attr utilities before version 2.6.0 are susceptible to a symlink traversal vulnerability. This flaw allows local attackers to exploit the getfattr and setfattr functionalities. By manipulating pathname components with symbolic links during directory hierarchy traversal, attackers can redirect operations to arbitrary files. This redirection could potentially allow unauthorized privilege escalation when these operations are executed by a privileged process that follows an attacker-controlled path.

References