sblim-cmpi-base vulnerabilities

CVEs whose affected-version data names the sblim-cmpi-base package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73585Medium· 6.3

2mo ago

Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack

A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating a symlink in a world-writable directory, an attacker can…

▾ SunlitRed Hat · sblim-cmpi-baseEPSS 0.14%via CVEORG