{"id":"CVE-2026-108119","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-108119","generatedAt":"2026-10-28T01:03:26.480Z","title":"The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created.","description":"A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive using a symlink target of exactly '..' combined with a deferred hardlink to create a new file outside the extraction directory, or reuse an extraction directory across two archives to replace an existing file outside it. If the archive is extracted with elevated privileges, this flaw can lead to privilege escalation or arbitrary code execution.","published":"2026-10-09T17:16:46.000Z","lastModified":"2026-10-13T17:17:19.000Z","status":"Awaiting Analysis","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"3.1","score":6.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H"},"cwe":["CWE-59"],"affected":[],"epss":{"score":0.00134,"percentile":0.02877,"date":"2026-10-26","history":[{"date":"2026-10-10","score":0.00123,"percentile":0.01879}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.13%). Track it; it rarely justifies an emergency change on its own."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-09T17:16:46.000Z","detail":{"score":"6.3","severity":"MEDIUM","publishedAt":"2026-10-09T17:16:46.400Z"},"summary":"New CVE, medium severity (CVSS 6.3)."}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:81391","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2026-108119","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548611","source":"secalert@redhat.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-108119","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}