CVE-2026-119291 | zuke-build Zuke up to 1.3.x Setup lstat path traversal

October 30, 2026 Yanac

A vulnerability, which was classified as problematic, was found in zuke-build Zuke up to 1.3.x. Impacted is the function lstat of the component Setup. Executing a manipulation can lead to path traversal.

The identification of this vulnerability is CVE-2026-119291. The attack can only be executed locally. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More