Skip to content
Critical Engrampa Vulnerability Allows Code Execution on Ubuntu Systems

Critical Engrampa Vulnerability Allows Code Execution on Ubuntu Systems

First seen 18 Aug 2026, 08:36 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 19, 2026 at 07:37 UTC
  • •Engrampa vulnerability allows arbitrary code execution via crafted files.
  • •Affected systems include Ubuntu 22.04, 20.04, 18.04, and 16.04 LTS.
  • •Users should update their systems to the latest package versions to mitigate risks.

A vulnerability in Engrampa, the archive manager for the MATE environment, has been identified, allowing attackers to execute arbitrary code by exploiting improper handling of symbolic links when extracting specially crafted archives. This flaw could enable an attacker to run programs as the user if a malicious file is opened. The affected versions include Engrampa 1.26.0-1ubuntu1+esm1 for Ubuntu 22.04 LTS, 1.24.0-2ubuntu0.1~esm1 for Ubuntu 20.04 LTS, and earlier versions for Ubuntu 18.04 and 16.04 LTS. Users are advised to update their systems to mitigate the risk. The vulnerability is tracked under CVE-2023. A standard system update is recommended to apply the necessary patches.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 54d ago How this analysis works

Timeline

2026-08-17
Engrampa vulnerability disclosed
Ubuntu Security Notice USN-8640-1 announced a critical vulnerability in Engrampa affecting multiple Ubuntu versions.
Linuxsecurity
2026-08-17
Patch released for Engrampa
Updates for Engrampa were released for affected Ubuntu versions to address the vulnerability.
Ubuntu

More articles in this cluster (2)

Following this threat?

Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3