CVE-2026-25706 | BDVDB-2026-366808 Detail

Description#

Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root on a machine being joined to that domain. This issue affects yast2-samba-client through 5.0.4.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-01Record published in the CVE List.
2. Version 22026-09-02Most recent update recorded in the CVE List.