CVE-2026-8784

MediumCVSS 4.2

Published: 18/05/2026(UTC)Updated: 25/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

A vulnerability was detected in npitre cramfs-tools up to 2.2 in the function change_file_status of cramfsck.c. Manipulation results in symlink following; the attack requires local access and the exploit is now public.

Risk Assessment

A local attacker could exploit symlink following to modify or overwrite unexpected files, potentially leading to privilege escalation.

Recommendation

Apply the patch identified as b4a3a695c9873f824907bd15659f2a6ac7667b4f or update cramfs-tools to a version containing the fix.

Other vulnerabilities in cramfs-tools

CVE-2026-8274Medium
A vulnerability was detected in cramfs-tools up to version 2.1. The do_directory function in cramfsck.c (Directory Handler) allows path traversal. The attack can only be performed locally, and the exploit has been publicly disclosed.

Original NVD description (English source)

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function change_file_status of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named b4a3a695c9873f824907bd15659f2a6ac7667b4f. It is recommended to apply a patch to fix this issue.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS