CVE-2026-18157

{
  "id": "CVE-2026-18157",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-31T03:16:25.223",
  "lastModified": "2026-10-23T23:10:00.157",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in the APT backend. This allows specially crafted package names, which begin with a hyphen, to be misinterpreted as command options by apt-get. Successful exploitation could lead to remote code execution (RCE) with root privileges, enabling the attacker to fully compromise the system's integrity, confidentiality, and availability."
    },
    {
      "lang": "es",
      "value": "Se encontró una falla en yggdrasil-worker-package-manager. Un atacante local con acceso existente al sistema podría explotar una vulnerabilidad de inyección de argumentos en el backend de APT. Esto permite que nombres de paquetes especialmente diseñados, que comienzan con un guion, sean malinterpretados como opciones de comando por apt-get. La explotación exitosa podría conducir a ejecución remota de código (RCE) con privilegios de root, permitiendo al atacante comprometer completamente la integridad, confidencialidad y disponibilidad del sistema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "RedHatInsights",
          "product": "yggdrasil-worker-package-manager",
          "defaultStatus": "unaffected",
          "collectionURL": "https://github.com/RedHatInsights/yggdrasil-worker-package-manager",
          "packageName": "yggdrasil-worker-package-manager",
          "versions": [
            {
              "version": "0",
              "lessThan": "0.1.4",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "0.2.0",
              "lessThan": "0.2.4",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 10",
          "defaultStatus": "unaffected",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "packageName": "yggdrasil-worker-package-manager",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-31T15:54:47.332670Z",
          "id": "CVE-2026-18157",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-88"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://access.redhat.com/security/cve/CVE-2026-18157",
      "source": "[email protected]"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2465250",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/RedHatInsights/yggdrasil-worker-package-manager/commit/959745bb5917c17f0316af199aace6c71baa5ad7",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/RedHatInsights/yggdrasil-worker-package-manager/releases/tag/0.1.4",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/RedHatInsights/yggdrasil-worker-package-manager/releases/tag/0.2.4",
      "source": "[email protected]"
    }
  ]
}