Vulnerability in Redhatinsights Yggdrasil-worker-package-manager
CVE-2026-18157
A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in the APT backend. This allows specially crafted package names, which begin with a…
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Redhatinsights Yggdrasil-worker-package-manager — versions 0, 0.2.0
- Red Hat Enterprise Linux 10
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking)
- secalert@redhat.com
- secalert@redhat.com
- secalert@redhat.com
Frequently asked questions
- What is CVE-2026-18157?
- CVE-2026-18157 is a high-severity vulnerability in Redhatinsights Yggdrasil-worker-package-manager, classified under Argument Injection. CVSS score: 7.8/10. Published 2026-07-31.
- How severe is CVE-2026-18157?
- High severity. CVSS v3 base score is 7.8 out of 10.