A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target directory with the permissions of the executing process.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-521f61f684 advisory.

    Update to the latest upstream release

    Vulnerability fix

    - CVE-2026-85518: Fix path traversal when dumping SDS components

    Maintenance, bug fix

    - Lock test_file for all_python.sh
    - Serialize the filehash DoS tests
    - Free the TestResult of an evaluation that names an unknown rule
    - Evaluate OVAL state with no entities as true
    - Ship oscap-run-sce-script with the SCE engine


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-03caed4282 advisory.

    Update to the latest upstream release

    Vulnerability fix

    - CVE-2026-85518: Fix path traversal when dumping SDS components

    Maintenance, bug fix

    - Lock test_file for all_python.sh
    - Serialize the filehash DoS tests
    - Free the TestResult of an evaluation that names an unknown rule
    - Evaluate OVAL state with no entities as true
    - Ship oscap-run-sce-script with the SCE engine


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not
    properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker
    can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream
    containing directory traversal sequences. Successful exploitation allows unauthorized file creation or
    modification outside the intended target directory with the permissions of the executing process.
    (CVE-2026-85518)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-88e8f36e7b advisory.

    Automatic update for openscap-1.4.6-1.fc46.

    ##### **Changelog**

    ```
    * Fri Oct 23 2026 Jan ern <jcerny@redhat.com> - 1:1.4.6-1
    - Upgrade to the latest upstream release
    - CVE-2026-85518: Fix path traversal when dumping SDS components (RHBZ#2558499)

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not     properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker     can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream     containing directory traversal sequences. Successful exploitation allows unauthorized file creation or     modification outside the intended target directory with the permissions of the executing process.
    (CVE-2026-85518)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
374733	Fedora 44 : openscap (2026-521f61f684)	Nessus	Fedora Local Security Checks	Local	medium
374717	Fedora 43 : openscap (2026-03caed4282)	Nessus	Fedora Local Security Checks	Local	medium
477726	Echo: openscap: security update to 1.4.2+dfsg-1+e1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
477726	Echo: openscap: security update to 1.4.2+dfsg-1+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
371417	Fedora 46 : openscap (2026-88e8f36e7b)	Nessus	Fedora Local Security Checks	Local	medium
370566	Linux Distros Unpatched Vulnerability : CVE-2026-85518	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-85518

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium