CVE-2025-10284

Improper Archive Extraction in unarchive Enables RCE PUBLISHED

Description (CNA)

BBOT's unarchive module could be abused by supplying malicious archives files and when extracted can then perform an arbitrary file write, resulting in remote code execution.

Affected (CNA)

Vendor / product	Versions
BLSOPS, LLC / bbot	affected 0.0.0 through 2.6.1

CWE

CWE-22

References

https://blog.blacklanternsecurity.com/p/bbot-security-advisory-gitdumper

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.