CVE-2026-59681: SUSE yast2-auth-client, инжекция

Описание

Оригинално описание

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads testjoin invocations by interpolating configuration values into a single command string and passing that string to Open3.popen2 / Open3.capture2, which causes Ruby to run it through /bin/sh. The Organizational Unit (ou), dnshostname, AD user name and AD domain name values are neither validated nor shell-quoted.

Засегнати продукти

• SUSE yast2-auth-client: до 5.0.4

Вид слабост

• CWE-78 Инжектиране на команди към операционната система

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-59681
• https://nvd.nist.gov/vuln/detail/CVE-2026-59681
• https://bugzilla.suse.com/show_bug.cgi?id=1272775