CVE-2026-78367
HIGH
NVD
CVSS Score
7
Severity
HIGH
Published
Aug 24, 2026
Vendor
unknown
Description
A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote attacker to execute arbitrary code on the system by convincing a user to build a malicious tarball.