CVE-2026-55628
MEDIUM
NVD
CVSS Score
5.5
Severity
MEDIUM
Published
Jul 01, 2026
Vendor
unknown
Description
In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.