CVE-2026-78367

Name of the Vulnerable Software and Affected Versions RPM (affected versions not specified)

Description An issue exists in the tarball processing of rpmbuild. When operating in tarball mode (such as -ts, -ta, or -tb), the getTarSpec() function in tools/rpmbuild.cc passes a member name from a crafted source archive to rpmExpand() within a %{basename:...} macro expression. This allows an attacker to inject RPM macros, including Lua expressions, leading to arbitrary code execution with the privileges of the user running the process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.