CVE-2026-54585 - mport sample file handling can write outside the configured root

Back Back to CVE browser

MEDIUM

mport sample file handling can write outside the configured root

Published Sep 17, 2026

6.0

MEDIUM

CVSS 4.0

EPSS 0.54%

Description

mport is the MidnightBSD Package Manager. Prior to 2.7.8, create_sample_file() in libmport/bundle_read_install_pkg.c did not constrain absolute source and destination paths from the sample-file manifest directive to mport->root. A malicious or malformed package manifest could therefore direct privileged sample-file handling to copy or write outside the configured installation root, compromising local filesystem integrity. This issue is fixed in version 2.7.8.

Affected products

Vendor MidnightBSD Product Mport Default
n/a
- Version
  < 2.7.8
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

MidnightBSD

Mport

n/a

Version	Status	Constraints
< 2.7.8	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-82323
Advisory
https://github.com/MidnightBSD/mport/commit/36a42c8ddbd23ee9eb72c4c17596eb92cb423cf0
x_refsource_MISC
https://github.com/MidnightBSD/mport/pull/122
x_refsource_MISC
https://github.com/MidnightBSD/mport/releases/tag/2.7.8
x_refsource_MISC
https://github.com/MidnightBSD/mport/security/advisories/GHSA-xqjc-rxmm-p27v
x_refsource_CONFIRM

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-82323		Advisory
https://github.com/MidnightBSD/mport/commit/36a42c8ddbd23ee9eb72c4c17596eb92cb423cf0		x_refsource_MISC
https://github.com/MidnightBSD/mport/pull/122		x_refsource_MISC
https://github.com/MidnightBSD/mport/releases/tag/2.7.8		x_refsource_MISC
https://github.com/MidnightBSD/mport/security/advisories/GHSA-xqjc-rxmm-p27v		x_refsource_CONFIRM