A vulnerability categorized as critical has been discovered in RPM. Affected by this issue is some unknown functionality of the component rpmuncompress. Executing a manipulation can lead to os command injection.
This vulnerability appears as CVE-2026-44604. The attack requires local access. There is no available exploit.
