Skip to content
Red HatCVE-2026-84837

Red Hat rpm: command injection

High7.8CVE-2026-84837 · Published Sep 2, 2026 · updated Sep 3, 2026

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment.

Red Hat advisory

Affected versions

PackageAffectedFixed in
Red Hat Enterprise Linux 10
Product
all versionsNo fix yet
Red Hat Enterprise Linux 6
Product
all versionsNo fix yet
Red Hat Enterprise Linux 7
Product
all versionsNo fix yet
Red Hat Enterprise Linux 8
Product
all versionsNo fix yet
Red Hat Enterprise Linux 9
Product
all versionsNo fix yet
Red Hat Hardened Images
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More Red Hat advisories

All Red Hat
Advisory
Red Hat Advanced Cluster Management for Kubernetes 2: remote code execution
Critical9.1Sep 2
Red Hat Enterprise Linux 10: command injection
High7.8Sep 2
The nsenter --join-cgroup option opens the target cgroup.procs file as root and...
High7.9Sep 2
Red Hat Enterprise Linux 10: link following
High7.0Sep 2
Red Hat util-linux: race condition
High7.8Sep 2
Red Hat Enterprise Linux: open redirect
Medium4.3Sep 2

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.