CVE-2026-8274
npitre cramfs-tools Directory cramfsck.c do_directory path traversal
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
1th
A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is the function do_directory of the file cramfsck.c of the component Directory Handler. Such manipulation leads to path traversal. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used. Upgrading to version 2.2 is able to address this issue. The name of the patch is 2fc492747115b24d8a07eddd27a2d45229cb273c. Upgrading the affected component is recommended.
| CWE | CWE-22 |
| Vendor | npitre |
| Product | cramfs-tools |
| Published | May 11, 2026 |
| Last Updated | May 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for npitre cramfs-tools
Be the first to know when new medium vulnerabilities affecting npitre cramfs-tools are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
npitre / cramfs-tools
2.0 2.1
References
vuldb.com: https://vuldb.com/vuln/362571 vuldb.com: https://vuldb.com/vuln/362571/cti vuldb.com: https://vuldb.com/submit/810864 github.com: https://github.com/npitre/cramfs-tools/issues/12 github.com: https://github.com/npitre/cramfs-tools/issues/12#issue-4307511739 github.com: https://github.com/npitre/cramfs-tools/commit/2fc492747115b24d8a07eddd27a2d45229cb273c github.com: https://github.com/npitre/cramfs-tools/releases/tag/v2.2 github.com: https://github.com/npitre/cramfs-tools/
Credits
🔍 nich0las (VulDB User)