CVE-2026-41082 Unknown

CVE-2026-41082

SUSE Released: April 18, 2026 Updated: April 18, 2026 Restart Required

Description

CVE-2026-41082 In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

Fixed Vulnerabilities 1

CVE-2026-41082 N/A 0.0 ⚠️ KEV fixed
Apr 16, 2026

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.

Quick Info

Patch ID: CVE-2026-41082
Vendor: SUSE
Severity: Unknown
CVEs Fixed: 1
Restart: Required

Vendor

SUSE

Additional Info

advisory id: CVE-2026-41082
advisory type: Security Update
cvrf filename: cvrf-CVE-2026-41082.xml

Share