CVE-2026-104620

A flaw was found in PackageKit. A path traversal vulnerability during action simulation in the Zypp backend allows a local attacker to manipulate file paths. This issue can be exploited by an unprivileged local user to achieve privilege escalation and gain root access to the system. Mitigation...

CVE-2026-104619

A flaw was found in PackageKit. This vulnerability allows a local, unprivileged user to achieve privilege escalation by rolling back installed security updates through the Zypp backend. By downgrading system packages to earlier vulnerable versions, an attacker can reintroduce and exploit previous...

CVE-2026-104619

Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...

CVE-2026-104619

The PackageKit Zypp Backend is vulnerable to a rollback security update issue in versions before 1.4.1 . This vulnerability allows untrusted users to roll back security updates, potentially leading to privilege escalation . Remediation is available via the SUSE-SU-2026:5143-1 update. Users can ap...

CVE-2026-104619

Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...

CVE-2026-104619 PackageKit ZYpp rollback vulnerability

Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...

EUVD-2026-120864

Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...

CVE-2026-104619: PackageKit: Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing…

Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...

PT-2026-141566

Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...

CVE-2026-104620: PackageKit: A path traversal attack in simulation of actions in the Zypp backend of PackageKit before 1.4.1 could be used by local…

A path traversal attack in simulation of actions in the Zypp backend of PackageKit before 1.4.1 could be used by local attackers to gain root privileges...

openSUSE Security Update : PackageKit (openSUSE-SU-2013:0889-1)

The PackageKit zypp backend was fixed to only allow patches to be updated. Otherwise a regular user could install new packages or even downgrade older packages to ones with security problems. CVE-2013-1764 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...