CVE-2026-18157: Yggdrasil Worker Package Manager RCE Flaw

CVE-2026-18157 Overview

CVE-2026-18157 is an argument injection vulnerability [CWE-88] in the yggdrasil-worker-package-manager component maintained by Red Hat Insights. The flaw resides in the APT backend, where package names beginning with a hyphen are passed directly to apt-get without argument termination. A local attacker with existing system access can craft package names that apt-get misinterprets as command-line options. Successful exploitation results in remote code execution with root privileges, compromising system confidentiality, integrity, and availability.

Critical Impact
Local attackers can achieve root-level code execution by injecting crafted package name arguments through the APT backend of yggdrasil-worker-package-manager.

Affected Products

Red Hat Insights yggdrasil-worker-package-manager versions prior to 0.1.4
Red Hat Insights yggdrasil-worker-package-manager versions prior to 0.2.4
Systems using the APT backend of yggdrasil-worker-package-manager for remote package management

Discovery Timeline

2026-07-31 - CVE CVE-2026-18157 published to NVD
2026-08-03 - Last updated in NVD database

Technical Details for CVE-2026-18157

Vulnerability Analysis

The vulnerability exists in the APT backend implementation of yggdrasil-worker-package-manager, a Red Hat Insights component that executes remote package management operations. The Go function responsible for invoking apt-get constructed its argument list without separating options from positional package name arguments. Attacker-supplied package names beginning with a hyphen were therefore parsed by apt-get as command-line flags rather than package identifiers.

Because apt-get supports options such as -o for overriding configuration directives, an attacker can supply crafted arguments that alter DPkg pre- and post-invoke hooks. These hooks execute shell commands as root during package operations. The result is root-privileged arbitrary code execution triggered through what appears to be a routine package management request.

Root Cause

The root cause is missing argument separation in the process invocation logic. The original code built the apt-get command line as ["--assume-yes", command] followed by user-controlled args, with no -- sentinel to indicate the end of options. This classic argument injection pattern [CWE-88] allows any element of args that begins with - to be reinterpreted by apt-get as a switch.

Attack Vector

Exploitation requires local access and low privileges on a host running the vulnerable worker. The attacker submits a package operation request containing a malicious package name string starting with a hyphen. When the worker forwards the request to apt-get, the crafted argument is consumed as an option that triggers execution of attacker-chosen commands with root privileges.

// Security patch in package_manager_apt.go
// fix: prevent argument injection in APT backend
 	command string,
 	args ...string,
 ) (stdout, stderr []byte, code int, err error) {
-	cmdargs := []string{"--assume-yes", command}
+	cmdargs := []string{"--assume-yes", command, "--"}
 	cmdargs = append(cmdargs, args...)
 	cmd := exec.Command("/usr/bin/apt-get", cmdargs...)
 	stdout, stderr, code, err = run(cmd, p.sendStdout, p.sendStderr)

Source: Red Hat GitHub Commit 959745b. The fix appends -- to the argument list, instructing apt-get to treat all subsequent tokens as positional package names rather than options.

Detection Methods for CVE-2026-18157

Indicators of Compromise

Execution of /usr/bin/apt-get with arguments beginning with - in positions that should hold package names
Unexpected DPkg configuration overrides such as -o APT::Update::Pre-Invoke or -o DPkg::Pre-Install-Pkgs in process command lines
Child processes of the yggdrasil worker spawning shells, interpreters, or network utilities as root
Package management events initiated by non-administrative local users through the yggdrasil channel

Detection Strategies

Monitor process creation telemetry for apt-get invocations parented by yggdrasil-worker-package-manager where argument tokens begin with a hyphen after the subcommand.
Alert on any apt-get command line containing -o overrides for Pre-Invoke, Post-Invoke, or DPkg:: hook directives.
Correlate yggdrasil worker requests with subsequent root-owned process trees to identify anomalous privilege usage.

Monitoring Recommendations

Enable auditd rules covering execve events for /usr/bin/apt-get and forward them to a centralized analytics platform.
Baseline legitimate package operations issued through yggdrasil and flag deviations in caller identity or argument shape.
Track version identifiers of yggdrasil-worker-package-manager across the fleet to confirm patched releases are deployed.

How to Mitigate CVE-2026-18157

Immediate Actions Required

Upgrade yggdrasil-worker-package-manager to version 0.1.4 or 0.2.4 on all affected hosts.
Audit systems for unauthorized package operations or root-executed commands originating from the yggdrasil worker.
Restrict local access to hosts running the worker and enforce least privilege for accounts able to submit package requests.

Patch Information

Red Hat has published fixed releases 0.1.4 and 0.2.4. The corrective change is tracked in commit 959745b and appends the -- sentinel to the apt-get argument vector. Additional context is available in the Red Hat CVE Advisory and the Red Hat Bug Report.

Workarounds

If patching is delayed, disable or stop the yggdrasil APT worker service on affected hosts until updated packages can be applied.
Constrain local user access on managed nodes so only trusted operators can interact with the package manager worker socket.
Apply SELinux or AppArmor confinement to restrict child processes spawned by apt-get under the worker context.

bash

# Verify the installed version meets the fixed release
rpm -q yggdrasil-worker-package-manager

# Temporarily stop the worker service pending patch deployment
sudo systemctl stop yggdrasil-worker-package-manager.service
sudo systemctl disable yggdrasil-worker-package-manager.service

# After upgrade, confirm the patched version and re-enable
sudo systemctl enable --now yggdrasil-worker-package-manager.service