PT-2026-41632 · Unknown · Cramfs-Tools

Nich0Las · CVE-2026-8784 · Published 2026-05-18 · Updated 2026-05-18

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions npitre cramfs-tools versions prior to 2.3

Description A local issue exists in the change file status() function within the cramfsck.c file. A manipulation of this function allows for symlink following, which occurs when a program follows a symbolic link to a target file, potentially allowing access to unauthorized files.

Recommendations Apply the patch b4a3a695c9873f824907bd15659f2a6ac7667b4f to resolve the issue. As a temporary workaround, restrict access to the change file status() function in cramfsck.c to minimize the risk of exploitation.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-61

CWE-59

Related Identifiers

CVE-2026-8784

Affected Products

Cramfs-Tools

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8784.json · Exploit
• 🔥 https://github.com/npitre/cramfs-tools/issues/13 · Exploit
• https://github.com/npitre/cramfs-tools/commit/b4a3a695c9873f824907bd15659f2a6ac7667b4f · Patch
• https://osv.dev/vulnerability/CVE-2026-8784 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-8784 · Security Note
• https://github.com/npitre/cramfs-tools/issues/13#issuecomment-4306102583 · Note
• https://vuldb.com/vuln/364408 · Note
• https://twitter.com/VulmonFeeds/status/2056235792599498910 · Twitter Post
• https://vuldb.com/vuln/364408/cti · Note
• https://twitter.com/CVEnew/status/2056253246314799376 · Twitter Post
• https://t.me/cveNotify/163813 · Telegram Post
• https://vuldb.com/submit/811897 · Note
• https://t.me/CVEtracker/54094 · Telegram Post
• https://github.com/npitre/cramfs-tools · Note