{"id":"CVE-2026-105422","kind":"vulnerability","aliases":["CVE-2026-105422"],"related":[],"title":"pardus-boot-repair: path traversal flaw in versions before 1.1.0","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-boot-repair allows Path Traversal.\n\nThis issue affects pardus-boot-repair: from 1.0.9 before 1.1.0.","summary":"The pardus-boot-repair boot repair tool from TÜBİTAK BİLGEM allows path traversal, so a crafted pathname can reach files outside the intended directory. The sources do not say what an attacker can read or write through it.","severity":"medium","cvss":6.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["boot-repair","linux","package","pardus"],"not_affected_if":["version-1.1.0-or-later"],"how_to_check":"- Check the installed pardus-boot-repair version against the affected range 1.0.9 up to, but not including, `1.1.0`","fix":"- pardus-boot-repair: move to `1.1.0` or later","status":"open","published_at":"2026-11-06T13:17:21+00:00","first_seen_at":"2026-11-06T13:42:19+00:00","triaged_at":"2026-11-06T13:43:12+00:00","updated_at":"2026-11-06T13:43:12+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-11-06T13:43:12Z","model":"claude-haiku-5-5","output":{"fix":"- pardus-boot-repair: move to `1.1.0` or later","reach":"unknown","title":"pardus-boot-repair: path traversal flaw in versions before 1.1.0","impact":"medium","summary":"The pardus-boot-repair boot repair tool from TÜBİTAK BİLGEM allows path traversal, so a crafted pathname can reach files outside the intended directory. The sources do not say what an attacker can read or write through it.","audience":"businesses","category":"package","nicknames":[],"who_cares":["pardus","linux","boot-repair"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; path traversal may expose files outside the intended directory","analyst_note":"Check the NVD entry and the upstream pardus-boot-repair 1.1.0 changelog to confirm the traversal path and privileges required.","how_to_check":"- Check the installed pardus-boot-repair version against the affected range 1.0.9 up to, but not including, `1.1.0`\n- Unknown whether any other check applies","plain_action":"","needs_analyst":true,"not_affected_if":["version-1.1.0-or-later"],"who_is_affected":"Systems running pardus-boot-repair from 1.0.9 before 1.1.0. The sources do not describe the data path or the privileges needed to trigger the traversal, so whether an outside attacker can reach it is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000691,"input_tokens":4252,"output_tokens":532,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-105422':14A,17A '-2026':13A,16A '1.0.9':95C '1.1.0':11A,97C 'affect':89C 'allow':35B,84C 'attack':56B 'bilgem':34B,75C 'boot':3A,19B,27B,29B,82C,92C 'boot-repair':18B 'craft':40B 'cve':12A,15A 'directori':48B,69C 'file':44B 'flaw':7A 'improp':61C 'institut':79C 'intend':47B 'issu':88C 'limit':62C 'linux':21B 'outsid':45B 'packag':22B 'pardus':2A,23B,26B,81C,91C 'pardus-boot-repair':1A,25B,80C,90C 'path':5A,36B,70C,85C 'pathnam':41B,65C 'reach':43B 'read':58B 'repair':4A,20B,28B,30B,83C,93C 'research':78C 'restrict':68C 'say':53B 'softwar':76C 'sourc':50B 'technolog':77C 'tool':31B 'travers':6A,37B,71C,86C 'tübitak':33B,74C 'version':9A 'vulner':72C 'write':60B","nicknames":[],"mitigations":[],"who_affected":"Systems running pardus-boot-repair from 1.0.9 before 1.1.0. The sources do not describe the data path or the privileges needed to trigger the traversal, so whether an outside attacker can reach it is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["bootrepair","linux","medium","package","pardus"],"campaign_type":null,"search_a":"'-105422':14A,17A '-2026':13A,16A '1.1.0':11A 'boot':3A 'cve':12A,15A 'flaw':7A 'pardus':2A 'pardus-boot-repair':1A 'path':5A 'repair':4A 'travers':6A 'version':9A","search_b":"'allow':35B 'attack':56B 'bilgem':34B 'boot':19B,27B,29B 'boot-repair':18B 'craft':40B 'directori':48B 'file':44B 'intend':47B 'linux':21B 'outsid':45B 'packag':22B 'pardus':23B,26B 'pardus-boot-repair':25B 'path':36B 'pathnam':41B 'reach':43B 'read':58B 'repair':20B,28B,30B 'say':53B 'sourc':50B 'tool':31B 'travers':37B 'tübitak':33B 'write':60B","search_c":"'1.0.9':95C '1.1.0':97C 'affect':89C 'allow':84C 'bilgem':75C 'boot':82C,92C 'directori':69C 'improp':61C 'institut':79C 'issu':88C 'limit':62C 'pardus':81C,91C 'pardus-boot-repair':80C,90C 'path':70C,85C 'pathnam':65C 'repair':83C,93C 'research':78C 'restrict':68C 'softwar':76C 'technolog':77C 'travers':71C,86C 'tübitak':74C 'vulner':72C","first_public_at":"2026-11-06T13:17:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"iletisim@usom.gov.tr","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105422","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105422","severity":null,"published_at":"2026-11-06T13:17:21+00:00","modified_at":"2026-11-06T13:17:21+00:00","first_seen_at":"2026-11-06T13:42:19+00:00","fetched_at":"2026-11-06T13:42:19+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}