CVE-2026-92153

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-92153
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92153.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-92153
Aliases
  • GHSA-5rfj-hw2g-vwmv
Published
2026-10-14T16:28:18Z
Modified
2026-10-28T11:19:41Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L CVSS Calculator
Summary
F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath
Details

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileUplink handling of Fw::FilePacket::StartPacket destination paths FileUplink copies the packet-controlled destinationPath and opens it for writing without canonicalization or confinement to an upload directory. When a peer able to send file-uplink packets supplies an absolute, traversing, or otherwise attacker-selected writable destination path, files can be created or overwritten at attacker-selected writable filesystem locations, affecting integrity and potentially availability. This issue is fixed in version 4.3.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-22",
        "CWE-73"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92153.json"
}
References

Affected packages

Git / github.com/nasa/fprime

Affected ranges

Type
GIT
Repo
https://github.com/nasa/fprime
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
7d8f579f159d2f7c2d4984d92828575e37f87fa6
Fixed
4c8b9c0b8692b0d47cbd5f2ccec61c74aa02b893
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "4.3.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "fixed": "4c8b9c0b8692b0d47cbd5f2ccec61c74aa02b893"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "v4.3.0",
            "range": [
                {
                    "fixed": "7d8f579f159d2f7c2d4984d92828575e37f87fa6"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

NASA-v1.*
NASA-v1.00
NASA-v1.3.1
NASA-v1.5.0
NASA-v1.5.1
NASA-v1.5.2
NASA-v1.5.3
v3.*
v3.0.0
v3.1.0
v3.1.1
v3.2.0
v3.3.0
v3.3.1
v3.3.2
v3.4.0
v3.4.1
v3.4.2
v3.4.3
v3.5.0
v3.5.1
v3.6.0
v4.*
v4.0.0
v4.0.0a1
v4.0.0a2
v4.0.0a3
v4.0.1a1
v4.1.0
v4.1.1
v4.2.0
v4.2.0a1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92153.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "162235715127618126588039394944980855377",
                "71397847921613245000384393498928908076",
                "24997996677463080805070427344933629673",
                "197406986852403633292211820976742899182"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-92153-3b58302c",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/nasa/fprime/commit/4c8b9c0b8692b0d47cbd5f2ccec61c74aa02b893",
        "target": {
            "file": "Os/Models/Models.cpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "304655544178037041435386901803573725372",
                "249330587665449842521934678303671345031",
                "155960671070747100383371037358389019189",
                "57859206970432066460757884534914740414",
                "194071119704802656526617840350377562571",
                "172159627576146882548561435081421216519",
                "138802876135278055134719779199110189956",
                "67250107881891192672288441245599525354",
                "160651465317930136548270109706405410621",
                "179288448467001993930302843862109019603"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-92153-3cf3fede",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/nasa/fprime/commit/4c8b9c0b8692b0d47cbd5f2ccec61c74aa02b893",
        "target": {
            "file": "Svc/FileUplink/FileUplink.hpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "45106712998803354637887165476364775131",
                "40990625181042123404008437238466498747",
                "61622642137051334223167946369595652391",
                "33294636553187624877442665781374536469"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-92153-5321e1b2",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/nasa/fprime/commit/4c8b9c0b8692b0d47cbd5f2ccec61c74aa02b893",
        "target": {
            "file": "Os/File.hpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "220871986205911448630192231363349951541",
                "260931914021443596660136766693082456079",
                "315279762989348708312365712005490674774",
                "284495186134821670997014725286047133290",
                "261178009939593061232097405506860384879",
                "171104910687724309862705296115416340102"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-92153-697d2eb9",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/nasa/fprime/commit/4c8b9c0b8692b0d47cbd5f2ccec61c74aa02b893",
        "target": {
            "file": "Svc/FileUplink/test/ut/FileUplinkTester.cpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "196980104249310335004165939675774161350",
            "length": 389
        },
        "id": "CVE-2026-92153-b1947cef",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/nasa/fprime/commit/4c8b9c0b8692b0d47cbd5f2ccec61c74aa02b893",
        "target": {
            "file": "TestDeploymentsProject/Ref/Top/RefTopology.cpp",
            "function": "configureTopology"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "24004808863253046553894403160092487525",
                "309049733070561727839268791042374158177",
                "293343457323149091899855863216090761857",
                "265492831952428384925326787080356911065"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-92153-c3003599",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/nasa/fprime/commit/4c8b9c0b8692b0d47cbd5f2ccec61c74aa02b893",
        "target": {
            "file": "TestDeploymentsProject/Ref/Top/RefTopology.cpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "163815630718925766641895957099696999922",
            "length": 237
        },
        "id": "CVE-2026-92153-dfe38149",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/nasa/fprime/commit/4c8b9c0b8692b0d47cbd5f2ccec61c74aa02b893",
        "target": {
            "file": "Svc/FileUplink/test/ut/FileUplinkTester.cpp",
            "function": "FileUplinkTester::FileUplinkTester"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "161121478350980668641505569048159586241",
                "197330325555016663945649684034210333074",
                "78687142873550066521529839959483510484"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-92153-e6c09efd",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/nasa/fprime/commit/4c8b9c0b8692b0d47cbd5f2ccec61c74aa02b893",
        "target": {
            "file": "Svc/FileUplink/FileUplink.cpp"
        }
    }
]
vanir_signatures_modified 
"2026-10-28T11:19:41Z"