CVE-2026-40024: sleuthkit, обхождане на път

Описание

Оригинално описание

The Sleuth Kit through 4.14.0 contains a path traversal vulnerability in tsk_recover that allows an attacker to write files to arbitrary locations outside the intended recovery directory via crafted filenames or directory paths with path traversal sequences in a filesystem image. An attacker can craft a malicious filesystem image with embedded /../ sequences in filenames that, when processed by tsk_recover, writes files outside the output directory, potentially achieving code execution by overwriting shell configuration or cron entries.

Засегнати продукти

• sleuthkit sleuthkit: до 4.14.0; a3f96b3bc36a8bb1a00c297f77110d4a6e7dd31b

Вид слабост

• CWE-22 Неправилно ограничаване на път до позволена директория

История

Други уязвимости в sleuthkit sleuthkit

• 4.8CVE-2026-40026
• 4.8CVE-2026-40025

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-40024
• https://nvd.nist.gov/vuln/detail/CVE-2026-40024
• https://github.com/sleuthkit/sleuthkit/commit/a3f96b3bc36a8bb1a00c297f77110d4a6e7dd31b
• https://mobasi.ai/sentinel
• https://www.vulncheck.com/advisories/sleuth-kit-tsk-recover-path-traversal