TI-2026-39263 CVE-2026-54371 · GHSA-hh95-r7mj-c9j5
attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr
Priority LOW 35
attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during…