PT-2026-39573 · Unknown · Cramfs-Tools

Nich0Las · Published 2026-05-11 · Updated 2026-05-11 · CVE-2026-8274

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions npitre cramfs-tools versions prior to 2.2

Description A path traversal issue exists in the Directory Handler component within the do directory() function of the cramfsck.c file. This flaw allows a local attacker to perform path traversal, which involves accessing files or directories outside the intended folder by manipulating file paths.

Recommendations Update to version 2.2.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-8274

Affected Products

Cramfs-Tools

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8274.json · Exploit
• 🔥 https://github.com/npitre/cramfs-tools/issues/12#issue-4307511739 · Exploit
• https://github.com/npitre/cramfs-tools/releases/tag/v2.2 · Patch
• https://github.com/npitre/cramfs-tools/commit/2fc492747115b24d8a07eddd27a2d45229cb273c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-8274 · Security Note
• https://osv.dev/vulnerability/CVE-2026-8274 · Vendor Advisory
• https://github.com/npitre/cramfs-tools/issues/12 · Note
• https://t.me/cveNotify/162996 · Telegram Post
• https://vuldb.com/vuln/362571 · Note
• https://t.me/CVEtracker/53350 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2053751741464576005 · Twitter Post
• https://vuldb.com/vuln/362571/cti · Note
• https://vuldb.com/submit/810864 · Note
• https://twitter.com/CVEnew/status/2053954504643518600 · Twitter Post
• https://github.com/npitre/cramfs-tools · Note