CyberRota Analysis
AI-GeneratedA vulnerability in the rpm package manager allows attackers to execute arbitrary code by supplying a specially crafted manifest file, which is processed with unexpected macro expansions. This flaw can result in a complete compromise of confidentiality, integrity, and availability for the affected user account. Organizations using rpm for package management should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using `rpm -q -p` or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened, allowing embedded shell commands to run with the privileges of the `rpm` process. Successful exploitation can lead to a full compromise of confidentiality, integrity, and availability for the affected account.