{"id":"CVE-2026-104620","published":"2026-11-09T15:17:04.997","lastModified":"2026-11-10T05:17:41.193","description":"A path traversal attack in simulation of actions in the Zypp backend of PackageKit before 1.4.1 could be used by local attackers to gain root privileges.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-23"],"vendors":[],"products":[],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1284954","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}