Medium severity · published Aug 20, 2026
CVE-2026-77113
Path Traversal Vulnerability in apport-unpack
6.7
CVSS
0.2%
EPSS
No
On KEV
Description
Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in crash report files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Apport · Canonical
before 2.36.0; before 2.34.2; before 2.28.4 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-77113
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-77113
github.com
https://github.com/canonical/apport/pull/646
launchpad.net
https://launchpad.net/bugs/2161697
More from Apport
7.8
CVE-2022-1242
Apport can be tricked into connecting to arbitrary sockets as the root user
7.8
CVE-2021-3899
There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root
7.8
CVE-2023-1326
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604
7.8
CVE-2021-25684
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO
7.8
CVE-2021-25683
It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the kernel