attr vulnerabilities

1 known vulnerability in attr from Attr Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  attr: Improper Link Resolution Before File Access

  CVE-2026-54371Jun 29, 2026Attr Project

  attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attacker