جزئیات آسیب‌پذیری
CVE-2026-27606
Red Hat OpenShift PipelinesRed Hat Ansible Automation Platform 2Red Hat Build of Podman Desktop - Tech PreviewRed Hat Fuse 7Red Hat OpenShift distributed tracing 3Red Hat Single Sign-On 7
Rollup 4 has Arbitrary File Write via Path Traversal
CVSS 4.0
8.8بالا
شرح رسمی (انگلیسی)
Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler (specifically v4.x and present in current source) is vulnerable to an Arbitrary File Write via Path Traversal. Insecure file name sanitization in the core engine allows an attacker to control output filenames (e.g., via CLI named inputs, manual chunk aliases, or malicious plugins) and use traversal sequences (`../`) to overwrite files anywhere on the host filesystem that the build process has permissions for. This can lead to persistent Remote Code Execution (RCE) by overwriting critical system or user configuration files. Versions 2.80.0, 3.30.0, and 4.59.0 contain a patch for the issue.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.8بالا | 4.0 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P |
| 9.1بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Fuse 7 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift distributed tracing 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Single Sign-On 7 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Self-service automation portal 2 | همه | CVEProject cvelistV5 (CNA) |
| rollup | rollup | < 2.80.0 | CVEProject cvelistV5 (CNA) |
| rollup | rollup | >= 3.0.0, < 3.30.0 | CVEProject cvelistV5 (CNA) |
| rollup | rollup | >= 4.0.0, < 4.59.0 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۰- https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc x_refsource_CONFIRM
- https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2 x_refsource_MISC
- https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e x_refsource_MISC
- https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3 x_refsource_MISC
- https://github.com/rollup/rollup/releases/tag/v2.80.0 x_refsource_MISC
- https://github.com/rollup/rollup/releases/tag/v3.30.0 x_refsource_MISC
- https://github.com/rollup/rollup/releases/tag/v4.59.0 x_refsource_MISC
- https://access.redhat.com/security/cve/CVE-2026-27606 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2442530 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27606.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:13512 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13508 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13545 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6174 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6802 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10175 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8483 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:5132 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:5665 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:5649 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۲/۰۶
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۱۹
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- GitHub_M
پیش‌بینی بهره‌برداری (EPSS)
۱٫۶۵٪
احتمال بهره‌برداری در ۳۰ روز
۷۶٫۶٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- اثبات مفهوم
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')