CVE-2026-41051

Summary

csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories.

Affected Software

VendorProductVersion RangeStatus
SUSEopenSUSE Tumbleweed? < 2.0+git.1600444747.83b3644-3.1affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References