Vulnerabilities CVE-2026-19589

CVE-2026-19589

High

Open

TLP:CLEAR

Packer vulnerable to arbitrary file write via crafted plugin archive during installation

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may allow unintended file system modification and could lead to code execution. A user who installs a plugin from a malicious or compromised source may be affected. This vulnerability (CVE-2026-19589) is fixed in Packer 1.16.0.

Details

CVSS Score: 7.1
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N
Confidence: 90%
Published: Aug 17, 2026
Last Modified: Aug 17, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.