Is CVE-2026-78367 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-78367?

CVE-2026-78367 has a CVSS v3 severity of HIGH (7).

Back

CVE-2026-78367

Description

A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote attacker to execute arbitrary code on the system by convincing a user to build a malicious tarball.