CVE-2026-104617

MEDIUM 5.1

sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline

CVSS Score

5.1

EPSS Score

0.0%

EPSS Percentile

0th

There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.

CWE	CWE-522
Vendor	suse
Product	suse linux enterprise server 16.1
Published	Oct 15, 2026

Stay Ahead of the Next One

Get instant alerts for suse suse linux enterprise server 16.1

Be the first to know when new medium vulnerabilities affecting suse suse linux enterprise server 16.1 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

SUSE / SUSE Linux Enterprise Server 16.1

SUSE / SUSE Linux Enterprise Server for NVIDIA 16.1

SUSE / openSUSE Leap 16.1

openSUSE / Tumbleweed

? < 947e9dc09ce7c36b35a868e397e30245cc5544a1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

bugzilla.suse.com: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-104617 suse.com: https://www.suse.com/security/cve/CVE-2026-104617.html

Credits

Matthias Gerstner of SUSE