PT-2026-140427
CVE-2026-104620
·
Published
2026-11-09
·
Updated
2026-11-09
Description by
CVSS 4.0
9.3
CriticalMetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions
PackageKit versions prior to 1.4.1
Description
A path traversal issue exists in the Zypp backend of PackageKit during the simulation of actions. This flaw allows a local attacker to escalate privileges to root.
Recommendations
Update PackageKit to version 1.4.1 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾