Automatic Bug Reporting Tool vulnerabilities

2 known vulnerabilities in Automatic Bug Reporting Tool from Red Hat. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Red Hat Enterprise Linux 7 Extended Lifecycle…: Improper Link Resolution Before File Access

  CVE-2026-54230Jun 13, 2026Red Hat

  A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process runn

• 7.8 High severity

  Red Hat Automatic Bug Reporting Tool Privilege Escalation Exploited

  CVE-2015-5287Dec 7, 2015Red HatEPSS 5%

  The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /va