Skip to content
OpenAdvisories
High USN-8640-1 1 CVE

engrampa vulnerability

Published Aug 17, 2026 · Updated Aug 17, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Engrampa incorrectly handled symbolic links when
extracting certain archives. An attacker could possibly use this issue to
write arbitrary files and execute arbitrary code.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS engrampa 1.12.0-2ubuntu0.1+esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS engrampa 1.20.0-1ubuntu0.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS engrampa 1.24.0-2ubuntu0.1~esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS engrampa 1.26.0-1ubuntu1+esm1

Vulnerabilities 1

  • High 8.2
    CVE-2023-52138

    Path traversal via crafted cpio archives in Engrampa archivers

    Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution (RCE) on the target. While handling CPIO archives, the Engrampa Archiv…

    mate-desktop engrampa engrampa engrampa Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-52138