CVE-2026-55222

Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user (the one that executes Isar) instead of root. If the calling user's id is identical to one of an unprivileged user inside the image, this user is able to alter existing keys and deploy new ones, silently breaking the apt repo integrity protection. The issue is has no impact on those images that use an immutable rootfs, or if apt is never invoked. Changing only the keys does not trigger an exploit, it's just one step in a chain. An attacker would also have to manipulate a remote repo or intercept non-secure communication with it. This issue has been patched via commit 29e84ed.

• CWE-1290

• https://github.com/ilbers/isar/commit/29e84ed301c8d25c570300cf82b563b7961392b0
• https://github.com/ilbers/isar/security/advisories/GHSA-rq66-pfw5-whqq

Published

Oct 23, 2026

Last Modified

Oct 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55215MariaDB Connector/Node.js is used to connect applications de…7.5
• CVE-2026-55217GLPI is a free asset and IT management software package. Fro…5.3
• CVE-2026-55219Paymenter is a free and open-source webshop solution for man…5.3
• CVE-2026-5522IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains…6.7
• CVE-2026-55220Pimcore is an Open Source Data & Experience Management Platf…9.3
• CVE-2026-55221Boruta is a standalone authorization server that aims to imp…6.5
• CVE-2026-55223c3p0 is a JDBC Connection pooling library. In versions prior…6.3
• CVE-2026-55224MineAdmin is a ready-to-use backend management system suitab…8.7
• CVE-2026-55225Strimzi provides a way to run an Apache Kafka cluster on Kub…8
• CVE-2026-55226Strimzi provides a way to run an Apache Kafka cluster on Kub…5.4
• CVE-2026-55227Weblate is a web-based localization tool. In versions prior …4.3
• CVE-2026-55228Weblate is a web-based continuous localization platform used…8.1