Attr Project vulnerabilities
We track 1 vulnerability in Attr Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 29, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Attr Project vulnerabilities
- 7.1 High severity
attr: Improper Link Resolution Before File Access
attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attacker