CVE-2026-92709

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-92709
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92709.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-92709
Aliases
  • GHSA-xmp9-244p-5ggv
Downstream
AZL (1)
CGA (72)
DEBIAN (1)
ECHO (1)
openSUSE (2)
SUSE (5)
UBUNTU (1)
Related
openSUSE (2)
SUSE (5)
Published
2026-10-22T13:32:56Z
Modified
2026-11-10T17:27:19Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE
Details

Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file names. A deployment becomes unsafe when a dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling. In that configuration, the rendered path can escape the operator's intended log directory. This is not limited to the RFC5424 HOSTNAME field. Any untrusted value that reaches a dynaFile path component can create the condition. At time of publication, there are no publicly available patches.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-22",
        "CWE-73"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92709.json"
}
References

Affected packages

Git / github.com/rsyslog/rsyslog

Affected ranges

Type
GIT
Repo
https://github.com/rsyslog/rsyslog
Events
Introduced
8c20f9ba3884e6fe30cdb6bae7a7abd008946cde
Last Affected
4734a93f4a34c4321d55b58f46ca401abe791330
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "1.15.0"
                },
                {
                    "last_affected": "8.2610.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92709.json"