Debian APT flaw CVE-2026-109518 lets attackers hijack updates and run code as root
VULNERABILITYCVE-2026-109518redteam/daily · 1 source
- Severity
- High
- Highest CVSS
- 7.7
- Exploited
- Not known
- Sources
- 1
What happened
A bug in APT, the tool Debian and Ubuntu use to install software updates, can let someone on the same network swap a trusted update for a malicious one. The malicious code can then run with the highest level of control on a Linux computer. No public reports of active attacks have been made so far.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Upgrade APT to 2.6.2 on bookworm or 3.0.4 on trixie, and check that the installed version matches the fixed one for your release.
- Run apt update and apt upgrade only on trusted networks.
- Avoid untrusted mirrors and proxies until your system is patched.
- On unpatched systems, consider setting Acquire::Retries to 0, though this can make updates less reliable on poor connections.
Written by AI from the sources, checked against them
Vulnerabilities
Full story timeline · 2 updates
Who reported · 1 outlet
Cyber Security News