CVE-2026-54231

Name of the Vulnerable Software and Affected Versions libreport (affected versions not specified)

Description A content injection issue exists in the ABRT post-create event handler scripts within libreport. The event script retrieves log entries from the systemd journal for crashed processes and writes them to files in the dump directory. Because embedded control characters are not sanitized, a local user can inject arbitrary content into the journal output by including newline characters in syslog messages, allowing them to control the content written to dump directory files by the root user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.