CVE-2026-82636 | Qubes OS up to 4.3.21 File Copy Agent qfile-dom0-agent.c system os command injection

August 30, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Qubes OS up to 4.3.21. The affected element is the function system of the file core-admin-linux/file-copy-vm/qfile-dom0-agent.c of the component File Copy Agent. The manipulation leads to os command injection.

This vulnerability is traded as CVE-2026-82636. An attack has to be approached locally. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More