Rocky Linux javapackages-tools Directory Traversal Vulnerability Disclosed

• •A directory traversal vulnerability affects Rocky Linux javapackages-tools.
• •Overly broad permissions could lead to privilege escalation from compromised accounts.
• •An update is available to address this security risk, identified as RLSA-2026-41948.

A significant directory traversal vulnerability has been identified in the Rocky Linux javapackages-tools, affecting various modules. This flaw arises from overly broad permissions, which could allow a compromised account to escalate privileges and access sensitive files. The vulnerability is linked to multiple modules including javacc-maven-plugin and maven2, among others. System administrators are advised to review and restrict permissions to mitigate potential risks. The update addresses this issue and is crucial for maintaining system integrity. The specific advisory is RLSA-2026-41948, published on July 20, 2026. No active exploitation has been reported yet, but the potential for significant impact remains. Users are encouraged to apply the latest updates promptly to safeguard their systems.