Executive brief
sosreport Exposure of Sensitive Information vulnerability
Affected products
- PyPI sosreport
Junglewise Threat Intelligence
CVE-2022-2806: PYSEC-2026-925 - sosreport Exposure of Sensitive Information vulnerability
CVE-2022-2806 · Severity: low · CVSS 3.1 · Published 2026-07-06
Technologies: sosreport (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2017-73 - sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an a
- PYSEC-2017-72 - sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive