{"id":"CVE-2026-18379","kind":"vulnerability","aliases":["CVE-2026-18379"],"related":[],"title":"Red Hat yggdrasil-worker-package-manager: repository names allow path traversal file writes and deletes as root","description":"A flaw was found in yggdrasil-worker-package-manager. An authenticated attacker can exploit this issue to achieve arbitrary file modification or potential privilege escalation. The vulnerability exists because repository management operations fail to sanitize directory traversal sequences (such as '../') within repository names. By supplying a crafted repository name, an attacker can manipulate the root-level worker process into creating or deleting files outside the intended directory, compromising host system integrity.","summary":"AddRepo/RemoveRepo in yggdrasil-worker-package-manager do not sanitize '../' in repository names, so an authenticated party able to send directives via the management message broker can make the root worker create or delete files outside /etc/yum.repos.d/. Red Hat rates it Moderate (CVSS 8.8 preliminary) because the broker control plane is required; no exploitation reported.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"yggdrasil-worker-package-manager","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"yggdrasil-worker-package-manager","fixed":["0.2.3-7.el10_2.9"],"affected":"RHEL 10 builds before 0.2.3-7.el10_2.9","ecosystem":"rhel"}],"ecosystems":["vendor"],"tags":["other","path-traversal","privilege-escalation","rhel","rhel-10","self-hosted","yggdrasil","yggdrasil-worker-package-manager"],"not_affected_if":["not-installed","untrusted-broker-access-blocked","worker-not-installed"],"how_to_check":"On RHEL 10 run: rpm -q yggdrasil-worker-package-manager. Exposed if installed and older than 0.2.3-7.el10_2.9. Also check whether yggd is running with the package-manager worker and who can publish messages to its MQTT broker. Other distributions packaging this worker: check with their own advisories.","fix":"On RHEL 10 (incl. 10.2 EUS), update to yggdrasil-worker-package-manager-0.2.3-7.el10_2.9 or later (RHSA-2026:96082): dnf upgrade yggdrasil-worker-package-manager","status":"open","published_at":"2026-11-12T19:17:04+00:00","first_seen_at":"2026-11-12T19:40:14+00:00","triaged_at":"2026-11-12T19:40:47+00:00","updated_at":"2026-11-12T19:41:32+00:00","category":"other","confidence":0.8,"triage":{"at":"2026-11-12T19:40:47Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Yggdrasil worker package manager: repository names allow path traversal writes","impact":"high","summary":"The yggdrasil-worker-package-manager does not sanitize '../' sequences in repository names, so a crafted name makes its root-level worker create or delete files outside the intended directory. An authenticated attacker can use this to modify arbitrary files and possibly escalate privileges on the host.","audience":"businesses","category":"other","nicknames":[],"who_cares":["yggdrasil-worker-package-manager","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Root-level worker overwrites or deletes host files, possibly escalating privileges","analyst_note":"Confirm affected versions, fixed release and deployment conditions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-18379 and the upstream project.","how_to_check":"- unknown","plain_action":"","product_name":"yggdrasil-worker-package-manager","needs_analyst":true,"not_affected_if":["not-installed"],"who_is_affected":"Systems running yggdrasil-worker-package-manager where a user with an account can submit or manage repository names. The sources do not name affected versions or the deployment conditions beyond that. Teams not running this package can skip it.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000721,"input_tokens":4588,"output_tokens":525,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm affected versions, fixed release and deployment conditions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-18379 and the upstream project.","search":"'-10':44B '-18379':21A,24A '-2026':20A,23A '/etc/yum.repos.d':90B '8.8':97B 'abl':71B 'achiev':127C 'addrepo/removerepo':54B 'allow':10A 'arbitrari':128C 'attack':121C,160C 'authent':69B,120C 'broker':79B,101B 'compromis':178C 'control':102B 'craft':156C 'creat':85B,170C 'cve':19A,22A 'cvss':96B 'delet':16A,87B,172C 'direct':74B 'directori':145C,177C 'escal':41B,134C 'exist':137C 'exploit':107B,123C 'fail':142C 'file':13A,88B,129C,173C 'flaw':110C 'found':112C 'hat':2A,92B 'host':47B,179C 'integr':181C 'intend':176C 'issu':125C 'level':166C 'make':81B 'manag':7A,53B,60B,77B,118C,140C 'manager':29A,34A 'manipul':162C 'messag':78B 'moder':95B 'modif':130C 'name':9A,66B,152C,158C 'oper':141C 'outsid':89B,174C 'packag':6A,52B,59B,117C 'package':28A,33A 'parti':70B 'path':11A,37B 'path-travers':36B 'plane':103B 'potenti':132C 'preliminari':98B 'privileg':40B,133C 'privilege-escal':39B 'process':168C 'rate':93B 'red':1A,91B 'report':108B 'repositori':8A,65B,139C,151C,157C 'requir':105B 'rhel':42B,43B 'root':18A,83B,165C 'root-level':164C 'sanit':63B,144C 'self':46B 'self-host':45B 'send':73B 'sequenc':147C 'suppli':154C 'system':180C 'travers':12A,38B,146C 'via':75B 'vulner':136C 'within':150C 'worker':5A,27A,32A,51B,58B,84B,116C,167C 'write':14A 'yggdrasil':4A,26A,31A,48B,50B,57B,115C 'yggdrasil-worker-package-manag':3A,49B,56B,114C 'yggdrasil-worker-package-manager':25A,30A","nicknames":[],"mitigations":[],"who_affected":"Systems running yggdrasil-worker-package-manager where a user with an account can submit or manage repository names. The sources do not name affected versions or the deployment conditions beyond that. Teams not running this package can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-12T19:41:32Z","by":"analyst","doc":"https://access.redhat.com/security/cve/CVE-2026-18379","run_id":3767}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["yggdrasilworkerpackagemanager"],"ptokens":["manager","package","worker","yggdrasil"],"labels":["high","other","pathtraversal","privilegeescalation","rhel","rhel10","selfhosted","vendor","yggdrasil","yggdrasilworkerpackagemanager"],"campaign_type":null,"search_a":"'-18379':21A,24A '-2026':20A,23A 'allow':10A 'cve':19A,22A 'delet':16A 'file':13A 'hat':2A 'manag':7A 'manager':29A,34A 'name':9A 'packag':6A 'package':28A,33A 'path':11A 'red':1A 'repositori':8A 'root':18A 'travers':12A 'worker':5A,27A,32A 'write':14A 'yggdrasil':4A,26A,31A 'yggdrasil-worker-package-manag':3A 'yggdrasil-worker-package-manager':25A,30A","search_b":"'-10':44B '/etc/yum.repos.d':90B '8.8':97B 'abl':71B 'addrepo/removerepo':54B 'authent':69B 'broker':79B,101B 'control':102B 'creat':85B 'cvss':96B 'delet':87B 'direct':74B 'escal':41B 'exploit':107B 'file':88B 'hat':92B 'host':47B 'make':81B 'manag':53B,60B,77B 'messag':78B 'moder':95B 'name':66B 'outsid':89B 'packag':52B,59B 'parti':70B 'path':37B 'path-travers':36B 'plane':103B 'preliminari':98B 'privileg':40B 'privilege-escal':39B 'rate':93B 'red':91B 'report':108B 'repositori':65B 'requir':105B 'rhel':42B,43B 'root':83B 'sanit':63B 'self':46B 'self-host':45B 'send':73B 'travers':38B 'via':75B 'worker':51B,58B,84B 'yggdrasil':48B,50B,57B 'yggdrasil-worker-package-manag':49B,56B","search_c":"'achiev':127C 'arbitrari':128C 'attack':121C,160C 'authent':120C 'compromis':178C 'craft':156C 'creat':170C 'delet':172C 'directori':145C,177C 'escal':134C 'exist':137C 'exploit':123C 'fail':142C 'file':129C,173C 'flaw':110C 'found':112C 'host':179C 'integr':181C 'intend':176C 'issu':125C 'level':166C 'manag':118C,140C 'manipul':162C 'modif':130C 'name':152C,158C 'oper':141C 'outsid':174C 'packag':117C 'potenti':132C 'privileg':133C 'process':168C 'repositori':139C,151C,157C 'root':165C 'root-level':164C 'sanit':144C 'sequenc':147C 'suppli':154C 'system':180C 'travers':146C 'vulner':136C 'within':150C 'worker':116C,167C 'yggdrasil':115C 'yggdrasil-worker-package-manag':114C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T19:17:04+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secalert@redhat.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-18379","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18379","severity":null,"published_at":"2026-11-12T19:17:04+00:00","modified_at":"2026-11-12T19:17:04+00:00","first_seen_at":"2026-11-12T19:40:14+00:00","fetched_at":"2026-11-12T19:40:14+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-18379:3767","url":"https://access.redhat.com/errata/RHSA-2026:96082","severity":null,"published_at":"2026-11-12T19:41:32+00:00","modified_at":"2026-11-12T19:41:32+00:00","first_seen_at":"2026-11-12T19:41:32+00:00","fetched_at":"2026-11-12T19:41:32+00:00","note":"Red Hat CVE page + RHSA-2026:96082: RHEL 10 fixed in yggdrasil-worker-package-manager-0.2.3-7.el10_2.9; upstream affected range and NVD not read (NVD unscored); no exploitation or PoC found.","cites":["https://access.redhat.com/errata/RHSA-2026:96082","https://access.redhat.com/security/cve/CVE-2026-18379"]}],"documents":[{"id":137956,"url":"https://access.redhat.com/errata/RHSA-2026:96082","title":"RHSA-2026:96082 yggdrasil-worker-package-manager security update","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":137957,"url":"https://access.redhat.com/security/cve/CVE-2026-18379","title":"Red Hat CVE-2026-18379","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}