CVE-2026-105422: Path Traversal in TÜBİTAK BİLGEM's pardus-boot-repair

Published Nov 6, 2026

Updated

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-boot-repair allows Path Traversal.

This issue affects pardus-boot-repair: from 1.0.9 before 1.1.0.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade pardus-boot-repair to a version that resolves this vulnerability.
Fixed in 1.1.0

Event History

Nov 6, 2026

CVE Published

via MITRE·12:40 PM

Data Sourced

via MITRE·12:40 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which versions should be prioritized for remediation?

pardus-boot-repair versions from 1.0.9 up to, but not including, 1.1.0 are affected. Upgrading to 1.1.0 or later removes the affected version range.

What is the impact of this issue?

The vulnerability allows path traversal, meaning an attacker may be able to use crafted pathnames to access or operate on files outside an intended restricted directory. The available information does not specify required privileges, attack vector, or the exact file operations involved.

CVE-2026-105422: Path Traversal in TÜBİTAK BİLGEM's pardus-boot-repair

Remediation

Event History

Frequently Asked Questions

Which versions should be prioritized for remediation?

What is the impact of this issue?

Company

Resources

Contact

Frequently Asked Questions

Which versions should be prioritized for remediation?

What is the impact of this issue?