CVE-2026-22860 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2026-22860 Interim 1 1 2026-03-05T00:18:12Z current 2026-03-05T00:18:12Z 2026-03-05T00:18:12Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2026-22860 Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory`'s path check used a string prefix match on the expanded path. A request like `/../root_example/` can escape the configured root if the target path starts with the root string, allowing directory listing outside the intended root. Versions 2.2.22, 3.1.20, and 3.2.5 fix the issue. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise High Availability Extension 15 SP4 SUSE Linux Enterprise High Availability Extension 15 SP5 SUSE Linux Enterprise High Availability Extension 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 openSUSE Leap 15.6 openSUSE Tumbleweed hawk2 rmt-server rmt-server-config rmt-server-pubcloud ruby2.5-rubygem-rack ruby2.5-rubygem-rack-1_6 ruby2.5-rubygem-rack-doc ruby2.5-rubygem-rack-doc-1_6 ruby2.5-rubygem-rack-testsuite ruby2.5-rubygem-rack-testsuite-1_6 ruby4.0-rubygem-rack-2.2-2.2.22-1.1 rubygem-rack rubygem-rack-1_6 ruby4.0-rubygem-rack-2.2-2.2.22-1.1 as a component of openSUSE Tumbleweed hawk2 as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 hawk2 as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 ruby2.5-rubygem-rack as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 rubygem-rack as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 hawk2 as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 ruby2.5-rubygem-rack as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 rubygem-rack as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 hawk2 as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 ruby2.5-rubygem-rack as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 rubygem-rack as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 rmt-server as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS rmt-server-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS rmt-server as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS rmt-server-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS rmt-server-pubcloud as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 rmt-server as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 rmt-server-pubcloud as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 rmt-server as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 rmt-server-pubcloud as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP7 rmt-server as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP7 rmt-server as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rmt-server-config as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rmt-server as a component of SUSE Linux Enterprise Server 15 SP1-LTSS rmt-server-config as a component of SUSE Linux Enterprise Server 15 SP1-LTSS rmt-server as a component of SUSE Linux Enterprise Server 15 SP2-LTSS rmt-server-config as a component of SUSE Linux Enterprise Server 15 SP2-LTSS rmt-server as a component of SUSE Linux Enterprise Server 15 SP3-LTSS rmt-server-config as a component of SUSE Linux Enterprise Server 15 SP3-LTSS rmt-server as a component of SUSE Linux Enterprise Server 15 SP4-LTSS rmt-server-config as a component of SUSE Linux Enterprise Server 15 SP4-LTSS rmt-server as a component of SUSE Linux Enterprise Server 15 SP5-LTSS rmt-server-config as a component of SUSE Linux Enterprise Server 15 SP5-LTSS rmt-server as a component of SUSE Linux Enterprise Server 15 SP6-LTSS rmt-server-config as a component of SUSE Linux Enterprise Server 15 SP6-LTSS rmt-server as a component of SUSE Linux Enterprise Server Teradata 15 SP4 hawk2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 rmt-server as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 rmt-server-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 rmt-server as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 rmt-server-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 rmt-server as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 rmt-server-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 hawk2 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 hawk2 as a component of openSUSE Leap 15.6 rmt-server as a component of openSUSE Leap 15.6 rmt-server-config as a component of openSUSE Leap 15.6 rmt-server-pubcloud as a component of openSUSE Leap 15.6 ruby2.5-rubygem-rack as a component of openSUSE Leap 15.6 ruby2.5-rubygem-rack-doc as a component of openSUSE Leap 15.6 ruby2.5-rubygem-rack-testsuite as a component of openSUSE Leap 15.6 rubygem-rack as a component of openSUSE Leap 15.6 ruby2.5-rubygem-rack-1_6 as a component of openSUSE Leap 15.6 ruby2.5-rubygem-rack-doc-1_6 as a component of openSUSE Leap 15.6 ruby2.5-rubygem-rack-testsuite-1_6 as a component of openSUSE Leap 15.6 rubygem-rack-1_6 as a component of openSUSE Leap 15.6 Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory`'s path check used a string prefix match on the expanded path. A request like `/../root_example/` can escape the configured root if the target path starts with the root string, allowing directory listing outside the intended root. Versions 2.2.22, 3.1.20, and 3.2.5 fix the issue. CVE-2026-22860 openSUSE Tumbleweed:ruby4.0-rubygem-rack-2.2-2.2.22-1.1 SUSE Linux Enterprise High Availability Extension 12 SP5:hawk2 SUSE Linux Enterprise High Availability Extension 15 SP4:hawk2 SUSE Linux Enterprise High Availability Extension 15 SP5:hawk2 SUSE Linux Enterprise High Availability Extension 15 SP7:hawk2 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:rmt-server SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:rmt-server-config SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:rmt-server SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:rmt-server-config SUSE Linux Enterprise Module for Public Cloud 15 SP4:rmt-server SUSE Linux Enterprise Module for Public Cloud 15 SP4:rmt-server-pubcloud SUSE Linux Enterprise Module for Public Cloud 15 SP5:rmt-server SUSE Linux Enterprise Module for Public Cloud 15 SP5:rmt-server-pubcloud SUSE Linux Enterprise Module for Public Cloud 15 SP7:rmt-server SUSE Linux Enterprise Module for Public Cloud 15 SP7:rmt-server-pubcloud SUSE Linux Enterprise Module for Server Applications 15 SP7:rmt-server SUSE Linux Enterprise Module for Server Applications 15 SP7:rmt-server-config SUSE Linux Enterprise Server 15 SP1-LTSS:rmt-server SUSE Linux Enterprise Server 15 SP1-LTSS:rmt-server-config SUSE Linux Enterprise Server 15 SP2-LTSS:rmt-server SUSE Linux Enterprise Server 15 SP2-LTSS:rmt-server-config SUSE Linux Enterprise Server 15 SP3-LTSS:rmt-server SUSE Linux Enterprise Server 15 SP3-LTSS:rmt-server-config SUSE Linux Enterprise Server 15 SP4-LTSS:rmt-server SUSE Linux Enterprise Server 15 SP4-LTSS:rmt-server-config SUSE Linux Enterprise Server 15 SP5-LTSS:rmt-server SUSE Linux Enterprise Server 15 SP5-LTSS:rmt-server-config SUSE Linux Enterprise Server 15 SP6-LTSS:rmt-server SUSE Linux Enterprise Server 15 SP6-LTSS:rmt-server-config SUSE Linux Enterprise Server Teradata 15 SP4:rmt-server SUSE Linux Enterprise Server for SAP Applications 12 SP5:hawk2 SUSE Linux Enterprise Server for SAP Applications 15 SP4:rmt-server SUSE Linux Enterprise Server for SAP Applications 15 SP4:rmt-server-config SUSE Linux Enterprise Server for SAP Applications 15 SP5:rmt-server SUSE Linux Enterprise Server for SAP Applications 15 SP5:rmt-server-config SUSE Linux Enterprise Server for SAP Applications 15 SP6:rmt-server SUSE Linux Enterprise Server for SAP Applications 15 SP6:rmt-server-config openSUSE Leap 15.6:hawk2 openSUSE Leap 15.6:rmt-server openSUSE Leap 15.6:rmt-server-config openSUSE Leap 15.6:rmt-server-pubcloud openSUSE Leap 15.6:ruby2.5-rubygem-rack-1_6 openSUSE Leap 15.6:ruby2.5-rubygem-rack-doc-1_6 openSUSE Leap 15.6:ruby2.5-rubygem-rack-testsuite-1_6 openSUSE Leap 15.6:rubygem-rack-1_6 important 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N