CVE-2026-104620
PackageKit/ZYpp local privilege escalation using InstallFiles(SIMULATE)
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A path traversal attack in simulation of actions in the Zypp backend of PackageKit before 1.4.1 could be used by local attackers to gain root privileges.
| CWE | CWE-23 |
| Vendor | packagekit |
| Product | packagekit |
| Published | Nov 9, 2026 |
| Last Updated | Nov 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for packagekit packagekit
Be the first to know when new unknown vulnerabilities affecting packagekit packagekit are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
PackageKit / PackageKit
0 < 1.4.1
References
Credits
Adam `adamm` Simuntis