CVE-2026-104983 Linux Mint Xreader PDF Attachment Saving ev-window.c g_file_get_child path traversal
Remote attackers can exploit a path traversal flaw in Xreader's PDF attachment saving to read or modify arbitrary files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-104983?
CVE-2026-104983 is a medium-severity path traversal vulnerability in Linux Mint Xreader, published on 3 Oct 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function g_file_get_child of the file shell/ev-window.c of the component PDF Attachment Saving Handler. Such manipulation of the argument attachment leads to path traversal. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. One of the project maintainers closed this issue as "completed", because "EPUB support was removed from Xreader and reimplemented in Xepub". Code analysis indicates that this might be a misunderstanding of the situation.
Weakness: CWE-22
Which versions are affected by CVE-2026-104983?
Linux distribution packages (1)
xreader openSUSE:Tumbleweed | All versions | 4.6.9-2.1 |
How do I fix CVE-2026-104983?
No fix published yet.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-104983 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-104983 exists.
Sources
Also known as GHSA-63c6-qprh-g95r, openSUSE-SU-2026:12077-1.