A vulnerability, which was classified as critical , has been found in npitre cramfs-tools up to 2.2 . Affected is the function change_file_status of the file cramfsck.c . Performing a manipulation results in symlink following. This vulnerability is reported as CVE-2026-8784 . The attack requires a local approach. Moreover, an exploit is present. It is recommended to apply a patch to fix this issue.