CVE-2026-25706

Name of the Vulnerable Software and Affected Versions yast2-samba-client versions prior to 5.0.5

Description Improper neutralization of special elements used in an OS command allows an attacker to execute arbitrary commands as root on a machine being joined to a domain. This occurs when the attacker controls the content of an Active Directory directory tree, such as through a rogue domain controller or a directory user delegated the right to create objects.

Recommendations Update yast2-samba-client to version 5.0.5 or later.