---
id: "CVE-2026-18379"
page: "https://infrastack.ai/live/CVE-2026-18379"
kind: "vulnerability"
aliases: ["CVE-2026-18379"]
title: "Red Hat yggdrasil-worker-package-manager: repository names allow path traversal file writes and deletes as root"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "yggdrasil-worker-package-manager", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "yggdrasil-worker-package-manager", "fixed": ["0.2.3-7.el10_2.9"], "affected": "RHEL 10 builds before 0.2.3-7.el10_2.9", "ecosystem": "rhel"}]
ecosystems: ["vendor"]
tags: ["other", "path-traversal", "privilege-escalation", "rhel", "rhel-10", "self-hosted", "yggdrasil", "yggdrasil-worker-package-manager"]
not_affected_if: ["not-installed", "untrusted-broker-access-blocked", "worker-not-installed"]
published_at: "2026-11-12T19:17:04+00:00"
first_seen_at: "2026-11-12T19:40:14+00:00"
updated_at: "2026-11-12T19:41:32+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18379", "first_seen_at": "2026-11-12T19:40:14+00:00"}, {"source": "analyst", "url": "https://access.redhat.com/security/cve/CVE-2026-18379", "first_seen_at": "2026-11-12T19:41:32+00:00", "cites": ["https://access.redhat.com/security/cve/CVE-2026-18379", "https://access.redhat.com/errata/RHSA-2026:96082"]}]
exploit_sources: []
---

# Red Hat yggdrasil-worker-package-manager: repository names allow path traversal file writes and deletes as root

Link for people: https://infrastack.ai/live/CVE-2026-18379 (this .md is for agents)

AddRepo/RemoveRepo in yggdrasil-worker-package-manager do not sanitize '../' in repository names, so an authenticated party able to send directives via the management message broker can make the root worker create or delete files outside /etc/yum.repos.d/. Red Hat rates it Moderate (CVSS 8.8 preliminary) because the broker control plane is required; no exploitation reported.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:yggdrasil-worker-package-manager affected range not listed fixed no fixed version listed
- rhel:yggdrasil-worker-package-manager affected RHEL 10 builds before 0.2.3-7.el10_2.9 fixed 0.2.3-7.el10_2.9

## How to check

On RHEL 10 run: rpm -q yggdrasil-worker-package-manager. Exposed if installed and older than 0.2.3-7.el10_2.9. Also check whether yggd is running with the package-manager worker and who can publish messages to its MQTT broker. Other distributions packaging this worker: check with their own advisories.

## Fix

On RHEL 10 (incl. 10.2 EUS), update to yggdrasil-worker-package-manager-0.2.3-7.el10_2.9 or later (RHSA-2026:96082): dnf upgrade yggdrasil-worker-package-manager

## Timeline

- 2026-11-12T19:40:14+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-18379
- 2026-11-12T19:41:32+00:00 analyst https://access.redhat.com/security/cve/CVE-2026-18379 — Red Hat CVE page + RHSA-2026:96082: RHEL 10 fixed in yggdrasil-worker-package-manager-0.2.3-7.el10_2.9; upstream affected range and NVD not read (NVD unscored); no exploitation or PoC found.

## Documents

- [advisory] Red Hat CVE-2026-18379 https://access.redhat.com/security/cve/CVE-2026-18379
- [fix] RHSA-2026:96082 yggdrasil-worker-package-manager security update https://access.redhat.com/errata/RHSA-2026:96082

## From the sources

A flaw was found in yggdrasil-worker-package-manager. An authenticated attacker can exploit this issue to achieve arbitrary file modification or potential privilege escalation. The vulnerability exists because repository management operations fail to sanitize directory traversal sequences (such as '../') within repository names. By supplying a crafted repository name, an attacker can manipulate the root-level worker process into creating or deleting files outside the intended directory, compromising host system integrity.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_