Detections
Analytics
SCA: security update for rack (GHSA-mxw3-3hh2-x2mh)
high Tenable Self-Hosted Container Security Plugin ID 437749
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5,
`Rack::Directory`’s path check used a string prefix match on the expanded path. A request like
`/../root_example/` can escape the configured root if the target path starts with the root string,
allowing directory listing outside the intended root. Versions 2.2.22, 3.1.20, and 3.2.5 fix the issue.
(CVE-2026-22860)
See Also
Plugin Details
Severity: High
ID: 437749
Version: Revision 1.7
Type: Local
Family: SCA Checks
Published: 2/17/2026
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.72
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N
CVSS Score Source: CVE-2026-22860
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 2/17/2026
Vulnerability Publication Date: 2/17/2026
Reference Information
CVE: CVE-2026-22860