Skip to content
OpenAdvisories
High USN-8445-1 1 CVE

libconfig-inifiles-perl vulnerability

Published Jun 17, 2026 · Updated Jun 17, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Config-IniFiles incorrectly handled the -file
argument in certain situations. An attacker could possibly use this issue
to execute arbitrary commands or overwrite arbitrary files.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS libconfig-inifiles-perl 3.000003-1ubuntu0.1
Ubuntu · 24.04 LTS 24.04:LTS libconfig-inifiles-perl 3.000003-2ubuntu0.1
Ubuntu · 25.10 libconfig-inifiles-perl 3.000003-3ubuntu0.1
Ubuntu · 26.04 LTS 26.04:LTS libconfig-inifiles-perl 3.000003-4ubuntu0.1

Vulnerabilities 1

  • High 8.6
    CVE-2026-11527

    Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle

    Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle. Config::IniFiles::_make_filehandle opens a filename argument with Perl's 2-arg open(), so a filename…

    SHLOMIF Config::IniFiles libconfig-inifiles-perl libconfig-inifiles-perl Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2026-11527