PT-2026-26139
CVE-2026-3479
·
Published
2026-03-18
·
Updated
2026-10-20
Description by
CVSS 4.0
6.0
MediumMetricsAV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
pkgutil (affected versions not specified)
Description
The
pkgutil.get data() function did not properly validate the resource argument, as documented. This allowed for path traversal, potentially enabling unauthorized access to files.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾