점검 대응높음KEV 미등록
CVE-2026-40024
sleuthkit sleuthkit, the sleuth kit 취약점
The Sleuth Kit through 4.14.0 contains a path traversal vulnerability in tsk_recover that allows an attacker to write files to arbitrary locations outside the intended recovery directory via crafted filenames or directory paths with path traversal sequences in a filesystem image. An attacker can craft a malicious filesystem image with embedded /../ sequences in filenames that, when processed by tsk_recover, writes files outside the output directory, potentially achieving code execution by overwriting shell configuration or cron entries.
- 대응 우선순위
- 점검
- CVSS
- 8.4
- EPSS
- 0.17% 백분위 6.29% · 2026.08.04 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.04.09