TI-2026-15176 CVE-2026-18477 · GHSA-v7fx-gjvh-347c
Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape
Priority LOW 19
A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the att…