This vulnerability involves improper link resolution before file access in the ABRT post-create event handler scripts within libreport on Red Hat Enterprise Linux 6. The scripts perform file writes via shell redirections without using the O_NOFOLLOW flag, which prevents following symbolic links. An attacker who can replace the target file with a symlink can cause the root shell process to follow the symlink and overwrite arbitrary files, leading to potential full system compromise. The CVSS v3.1 score is 7.0, indicating high severity with impacts on confidentiality, integrity, and availability. No official patch or remediation level is currently provided in the vendor advisory, and no known exploits in the wild have been reported.

The vulnerability allows an attacker with limited privileges to cause a root shell process to overwrite arbitrary files by exploiting symlink following during file writes. This can lead to full system compromise affecting confidentiality, integrity, and availability of the system. The CVSS score of 7.0 reflects high severity due to the potential for arbitrary file overwrites by a process running as root.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-54230 for current remediation guidance. Until an official fix is available, restrict access to the affected scripts and monitor for suspicious activity related to symlink manipulation in the ABRT event handler environment.