All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-55628
MEDIUMpublished 2026-07-01 19:16 UTC · 3 days ago · modified 2026-07-02 17:54 UTC
5.5
CVSS / 10
// description
In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.
// weaknesses (CWE)
- CWE-73
- CWE-862