Detections
Analytics
Echo: sed: security update to 4.9-2+b1+e1
low Tenable Cloud Security Plugin ID 461191
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file()
performs two separate, non-atomic filesystem operations on the same path: 1. resolves symlink to its
target and stores the resolved path for determining when output is written, 2. opens the original symlink
path (not the resolved one) to read the file. Between these two calls there is a race window. If an
attacker atomically replaces the symlink with a different target during that window, sed will: read
content from the new (attacker-chosen) symlink target and write the processed result to the path recorded
in step 1. This can lead to arbitrary file overwrite with attacker-controlled content in the context of
the sed process. This issue was fixed in version 4.10. (CVE-2026-5958)
Solution
Update the sed library and its related packages to version 4.9-2+b1+e1 or later.See Also
Plugin Details
Severity: Low
ID: 461191
Version: Revision 1.1
Type: Local
Family: Echo Local Security Checks
Published: 10/2/2026
Updated: 10/2/2026
Risk Information
VPR
Risk Factor: Medium
Score: 4.8
Percentile: 57.77
CVSS v2
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 3.9
Vector: CVSS2#AV:L/AC:H/Au:M/C:C/I:C/A:N
CVSS Score Source: CVE-2026-5958
CVSS v3
Risk Factor: Medium
Base Score: 6.9
Temporal Score: 6
Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: Low
Base Score: 2.1
Threat Score: 0.5
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 4/21/2026
Vulnerability Publication Date: 4/20/2026
Reference Information
CVE: CVE-2026-5958
IAVA: 2026-A-0404