Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.8

cri-tools allows unauthorized parent directory access

published 18 days ago
Summary

The cri-tools software can be tricked into reaching files outside its intended folder, potentially exposing sensitive system data. This could let attackers view or modify files they shouldn't. Update to the latest version of cri-tools or apply the provided patch to close the gap.

What to do
  • Update cleanstart cri-tools to version 1.29.0-r5.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart cri-tools < 1.29.0-r5
Fix: upgrade to 1.29.0-r5
Original advisory text
It was possible to improperly access the parent directory of an os
Security vulnerability affects the cri-tools package. It was possible to improperly access the parent directory of an os.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
3.8 Low
Timeline
Published1 Oct 2026
Updated1 Oct 2026
First seen1 Oct 2026
Sources
CLEANSTART-2026-CB13715 · OSV
Track software like this
Free during beta