CVE-2026-41051

csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories.

Score

CVSS 4.0 5.1 Medium

Status

Awaiting Analysis - meissner@suse.de

Published

2026-05-13

Last modified

2026-10-26

Weaknesses

CWE-367

Affected products

• Opensuse Tumbleweed (Suse)

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-41051