CVE-2026-57966

A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the guest operating system. This occurs because the filename provided by the SPICE host during file transfers is not properly sanitized before being used. An attacker could exploit this to write to sensitive locations with the privileges of the spice-vdagent process, typically the logged-in user. This issue requires the SPICE host to be untrusted or compromised for exploitation.

• CWE-22

• https://access.redhat.com/security/cve/CVE-2026-57966Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2493582Issue Tracking, Vendor Advisory

Published

Jun 29, 2026

Last Modified

Jul 8, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5796GitLab has remediated an issue in GitLab CE/EE affecting all…4.3
• CVE-2026-57960Hi.Events through 1.9.0 public check-in list endpoints use s…8.3
• CVE-2026-57961phpMyFAQ before 4.1.5 contains a potential authenticated pat…5.1
• CVE-2026-57962A malicious LDAP server, which a Thunderbird user is configu…5.3
• CVE-2026-57963An attacker who can send HTML chat messages (via Matrix or X…6.5
• CVE-2026-57965A flaw was found in spice-vdagent. A malicious or compromise…5.1
• CVE-2026-57968Buffer over-read in Windows Subsystem for Linux allows an au…7.8
• CVE-2026-57969Missing authentication for critical function in Azure CycleC…8.8
• CVE-2026-5797The Quiz And Survey Master plugin for WordPress is vulnerabl…5.3
• CVE-2026-57973Time-of-check time-of-use (toctou) race condition in Windows…4.7
• CVE-2026-57974Integer overflow or wraparound in Microsoft Edge (Chromium-b…8.8
• CVE-2026-57975Access of resource using incompatible type ('type confusion'…7.5