Ghostwire

CVE-2026-55628: In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both...

MEDIUM CVSS 0.0

Published: July 1, 2026 | Last Modified: July 1, 2026

Description

In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References