VYPR

FreeBSD Jail Connection Plugin

by Ansible

CVEs (1)

  • CVE-2026-55074higAug 12, 2026
    risk 0.38cvss epss

    Through version 1.3.0, the jailexec connection plugin's put_file resolved a transfer's destination to a path on the jail host ( + ) and ran mkdir -p and mv there as root on the host. Those commands follow symbolic links, and the path was…