CVE-2026-104617: Opensuse Tumbleweed

Medium severity, CVSS 5.1. EPSS: 0.1% chance of exploitation in the next 30 days.

There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.

Affected products

• Opensuse Tumbleweed
• Suse Opensuse Leap 16.1
• Suse Suse Linux Enterprise Server 16.1
• Suse Suse Linux Enterprise Server For NVIDIA 16.1

Published 2026-10-15. Last modified 2026-10-16.