← CVE Intelligence

CVE-2026-18508

Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite PUBLISHED

Description (CNA)

A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 2:1.35-13.el10_2 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 2:1.30-13.el8_10 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 2:1.34-13.el9_8 before *
Red Hat / Red Hat Discovery 2unaffected 1788205779 before *
Red Hat / Red Hat Hardened Imagesunaffected 1.35-9.2.hum1 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788880445 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788880464 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788880456 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788765051 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788880581 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Hardened Imagesunaffected
Red Hat / Red Hat Hardened Imagesunaffected
Red Hat / Red Hat Hardened Imagesunaffected
Red Hat / Red Hat Hardened Imagesunaffected
Red Hat / Red Hat Hardened Imagesunaffected
Red Hat / Red Hat Hardened Imagesunaffected
Red Hat / Red Hat Hardened Imagesunaffected
Red Hat / Red Hat Hardened Imagesunaffected
Red Hat / Red Hat Hardened Imagesunaffected
Red Hat / Red Hat Hardened Imagesunaffected
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenShift Container Platform 4affected

CWE

CWE-59

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.