Read the docs
TI-2011-04610 Aliases CVE-2011-10007GHSA-cvg9-q978-4569

OS command injection in RCLAMP File::Find::Rule

Priority HIGH 73CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 4 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-78.

Summary

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed. Example: $ mkdir /tmp/poc; echo > "/tmp/poc/|id" $ perl -MFile::Find::Rule \     -E 'File::Find::Rule->grep("foo")->in("/tmp/poc")' uid=1000(user) gid=1000(user) groups=1000(user),100(users)

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00859 58th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Partial Red Hat: 5 advisoriesRed Hat: 4 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RCLAMPFile::Find::Ruleup to 0.34—No fix listedCNA
  • File::Find::Rule VendorRCLAMP Affected up to 0.34 Fixed in — No fix listed CNA

Remediation

Red Hat 5 advisories

  • RHSA-2025:9741 Released 2025-06-26 · Red Hat rating Important
    perl-File-Find-Rule security update
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) perl-File-Find-Rule-0.33-5.el7_9.1
  • RHSA-2025:9740 Released 2025-06-26 · Red Hat rating Important
    perl-File-Find-Rule-Perl security update
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) perl-File-Find-Rule-Perl-1.13-2.el7_9.1
  • RHSA-2025:9658 Released 2025-06-25 · Red Hat rating Important
    perl-File-Find-Rule security update
    • Red Hat CodeReady Linux Builder EUS (v.9.4) perl-File-Find-Rule-0.34-19.el9_4.1
Show 2 more Red Hat advisories
  • RHSA-2025:9605 Released 2025-06-25 · Red Hat rating Important
    perl-File-Find-Rule security update
    • Red Hat Enterprise Linux CRB (v. 8) perl-File-Find-Rule-0.34-9.el8_10
  • RHSA-2025:9517 Released 2025-06-24 · Red Hat rating Important
    perl-File-Find-Rule security update
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) perl-File-Find-Rule-0.34-19.1.el9_6

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat CodeReady Linux Builder EUS (v.9.4)Fixed RHSA-2025:9658
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2025:9605
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2025:9517
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2025:9740, RHSA-2025:9741

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-10007
  2. 2026-10-03 Alias added: GHSA-cvg9-q978-4569

References

Exploit 1

Patch 1

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences