CVE-2026-73585
published 2026-08-13CVE-2026-73585: A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a…
PriorityP434medium6.3CVSS 3.1
AVLACHPRLUINSUCNIHAH
EPSS
0.14%
3.3th percentile
A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating a symlink in a world-writable directory, an attacker can redirect privileged writes to an arbitrary file during script execution in a privileged context. This can lead to the overwrite of root-owned files, potentially disrupting system services or operation. Exploitation is conditional on the script running with elevated privileges and may be mitigated by sticky-directory symlink protections.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.16.3MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
vendor_redhat6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
sblim-cmpi-base Provider Registration Scripts temp file
vuldb·2026-08-25·CVSS 6.3
CVE-2026-73585 [MEDIUM] sblim-cmpi-base Provider Registration Scripts temp file
A vulnerability classified as very critical was found in sblim-cmpi-base. Affected is an unknown function of the component Provider Registration Scripts. Executing a manipulation can lead to insecure temporary file.
This vulnerability is registered as CVE-2026-73585. The attack needs to be launched locally. No exploit is available.
GHSA
A flaw was found in sblim-cmpi-base.
ghsa_unreviewed·2026-08-13
CVE-2026-73585 [MEDIUM] CWE-377 A flaw was found in sblim-cmpi-base.
A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating a symlink in a world-writable directory, an attacker can redirect privileged writes to an arbitrary file during script execution in a privileged context. This can lead to the overwrite of root-owned files, potentially disrupting system services or operation. Exploitation is conditional on the script running with elevated privileges and may be mitigated by sticky-directory symlink protections.
Red Hat
sblim-cmpi-base: Insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack
vendor_redhat·2026-08-13·CVSS 6.3
CVE-2026-73585 [MEDIUM] CWE-377 sblim-cmpi-base: Insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack
sblim-cmpi-base: Insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack
A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating a symlink in a world-writable directory, an attacker can redirect privileged writes to an arbitrary file during script execution in a privileged context. This can lead to the overwrite of root-owned files, potentially disrupting system services or operation. Exploitation is conditional on the script running with elevated privileges and may be mitigated by sticky-directory symlink protections.
Statement: Moderate: This flaw in `sblim-cmpi-base` provider registration scripts allows a loc
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-73585 sblim-cmpi-base: Insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack [fedora-all]
bugzilla·2026-08-13·CVSS 6.3
CVE-2026-73585 [MEDIUM] CVE-2026-73585 sblim-cmpi-base: Insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack [fedora-all]
CVE-2026-73585 sblim-cmpi-base: Insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
AI_ONLY_REPORT
package: sblim-cmpi-base-1.6.4-30.el10
Summary: Insecure temporary file creation in world-writable directories
allows symlink overwrite: predictable temporary filenames in provider
registration scripts let a local attacker redirect privileged writes into
an attacker-chosen file during registration.
Requirements to exploit: A local unprivileged user must be able to create a
symlink in `/var/tmp` or `/t
Bugzilla
CVE-2026-73585 sblim-cmpi-base: Insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack
bugzilla·2026-04-26·CVSS 6.3
CVE-2026-73585 [MEDIUM] CVE-2026-73585 sblim-cmpi-base: Insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack
CVE-2026-73585 sblim-cmpi-base: Insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack
AI_ONLY_REPORT
package: sblim-cmpi-base-1.6.4-30.el10
Summary: Insecure temporary file creation in world-writable directories
allows symlink overwrite: predictable temporary filenames in provider
registration scripts let a local attacker redirect privileged writes into
an attacker-chosen file during registration.
Requirements to exploit: A local unprivileged user must be able to create a
symlink in `/var/tmp` or `/tmp`, and `provider-register.sh` must be run in
a privileged context such as RPM `%pre`, `%post`, or `%preun`, or invoked
manually as root with a vulnerable registration mode. Exploitability is
reduced or blocked on systems enforcing stick
2026-08-13
Published