CVE-2026-104620 | PackageKit up to 1.4.0 Zypp backend path traversal

November 9, 2026 Yanac

A vulnerability described as very critical has been identified in PackageKit up to 1.4.0. Affected by this vulnerability is an unknown functionality of the component Zypp backend. The manipulation results in path traversal.

This vulnerability was named CVE-2026-104620. The attack needs to be approached locally. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More