TI-2026-83179 CVE-2026-119704 · GHSA-wrmv-w7w7-jxc9Symlink following in Bastille jail copy commands allows jail escapePriority LOW 25Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh, rcp.sh and jcp.sh subcommands that allows jailed users to escape jail isolation.CVSS 4.0MEDIUM 5.3· Local · Low privileges · User interaction · EPSS 0.00141 · Published 2026-10-30 · No fix listed CWE-59