CVE-2026-105840

A flaw was found in lrzsz. The lrz receive utility fails to properly sanitize absolute file paths in restricted mode, only checking for relative path traversal sequences. A remote attacker transmitting files can exploit this vulnerability to write or overwrite arbitrary files outside the intended directory with the permissions of the receiving user.

Red Hat has rated this vulnerability as Important because successful exploitation can compromise system integrity or enable arbitrary code execution through the overwriting of user-owned configuration or executable files. In Red Hat Enterprise Linux, lrzsz is an optional package providing legacy serial and dial-up file transfer utilities, which is not part of default or minimal system deployments. The flaw only poses a risk during interactive sessions where a local user actively invokes the receive tool to accept files across an untrusted communication channel.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.