Log in Start free

Vulnerability · Published Jun 16, 2026 · Assigned by redhat

CVE-2026-2604Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling

Medium 5.6

In plain English

A medium-severity security flaw in Evolution Data Server from GNOME. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.6Medium
Exploit odds (30 days)0.3%top 79.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored without proper validation during contact creation or modification. Later, during contact deletion, the URI is processed with a less strict check, leading to the deletion of arbitrary files on the host filesystem. This could potentially include critical Flatpak override files.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12evolution-data-server3.46.4-2+deb12u1DEBIAN-CVE-2026-2604
Debian:13evolution-data-serverno fix listedDEBIAN-CVE-2026-2604
Debian:14evolution-data-server3.56.2-8DEBIAN-CVE-2026-2604
Ubuntu:22.04:LTSevolution-data-server3.44.4-0ubuntu1.2UBUNTU-CVE-2026-2604
Ubuntu:24.04:LTSevolution-data-server3.52.3-0ubuntu1.2UBUNTU-CVE-2026-2604
Ubuntu:25.10evolution-data-server3.56.2-3ubuntu0.1UBUNTU-CVE-2026-2604

Affected products (as reported)

VendorProductVersions
GNOME Evolution Data Server 0 – before 3.59.3
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-73 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L

References