Skip to content
OpenAdvisories
High USN-8372-1 1 CVE

age vulnerability

Published Jun 2, 2026 · Updated Jun 2, 2026

Ecosystem: Ubuntu

Summary

It was discovered that age did not properly validate plugin names. An
attacker could possibly use this issue to cause execution of an
arbitrary program by supplying a crafted recipient or identity string.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS age 1.1.1-1ubuntu0.24.04.3+esm1

Vulnerabilities 1

  • High 7.7
    CVE-2024-56327

    Malicious plugin names, recipients, or identities can cause arbitrary binary execution in pyrage

    pyrage is a set of Python bindings for the rage file encryption library (age in Rust). `pyrage` uses the Rust `age` crate for its underlying operations, and `age` is vulnerable to GHSA-4fg7-vxc8-qx5w. All details of GHSA-4fg7-vxc8-qx5w are relevant to `pyrage…

    woodruffw pyrage pyrage age Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2024-56327