Tar extraction in moby/go-archive can write outside the destination directory via link following
Priority HIGH 66CWE-59Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Active
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 12 fixed, 16 without a fix
Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat.
Summary
The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the filesystem operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of the destination directory. An attacker who controls the contents of an archive can create or overwrite files at arbitrary paths writable by the extracting process.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0044 38th percentileScored 2026-11-07
Fix Partial go-archive (moby): 0.3.0Docker Sandboxes (Docker): 0.38.0+5 more productsRed Hat: 14 advisoriesRed Hat: 12 fixed, 16 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| moby | go-archive | before 0.3.0 | 0.3.0 | Patch available | CNA |
| Docker | Docker Sandboxes | before 0.38.0 | 0.38.0 | Patch available | CNA |
| Docker | Docker Desktop | before 4.86.0 | 4.86.0 | Patch available | CNA |
| Docker | Docker Engine | before 29.7.0 | 29.7.0 | Patch available | CNA |
| Docker | Docker CLI | before 29.7.0 | 29.7.0 | Patch available | CNA |
| Docker | Docker Compose | before 5.4.0 | 5.4.0 | Patch available | CNA |
| — | github.com/moby/go-archive (Go) | before 0.3.0 | 0.3.0 | Patch available | GHSA-hfg8-hc9c-6c3h |
- go-archive Vendormoby Affected before 0.3.0 Fixed in 0.3.0 Patch available CNA
- Docker Sandboxes VendorDocker Affected before 0.38.0 Fixed in 0.38.0 Patch available CNA
- Docker Desktop VendorDocker Affected before 4.86.0 Fixed in 4.86.0 Patch available CNA
- Docker Engine VendorDocker Affected before 29.7.0 Fixed in 29.7.0 Patch available CNA
- Docker CLI VendorDocker Affected before 29.7.0 Fixed in 29.7.0 Patch available CNA
- Docker Compose VendorDocker Affected before 5.4.0 Fixed in 5.4.0 Patch available CNA
- github.com/moby/go-archive (Go) Vendor— Affected before 0.3.0 Fixed in 0.3.0 Patch available GHSA-hfg8-hc9c-6c3h
Remediation
- Fix · CNA go-archive (moby) Fixed in 0.3.0
- Fix · CNA Docker Sandboxes (Docker) Fixed in 0.38.0
- Fix · CNA Docker Desktop (Docker) Fixed in 4.86.0
- Fix · CNA Docker Engine (Docker) Fixed in 29.7.0
- Fix · CNA Docker CLI (Docker) Fixed in 29.7.0
- Fix · CNA Docker Compose (Docker) Fixed in 5.4.0
- Fix · GHSA-hfg8-hc9c-6c3h github.com/moby/go-archive (Go) Fixed in 0.3.0 Advisory →
Red Hat 14 advisories
- RHSA-2026:92510 Released 2026-10-29 · Red Hat rating CriticalRHOAI 3.4.6 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
- RHSA-2026:90321 Released 2026-10-26 · Red Hat rating CriticalRed Hat OpenShift Dev Spaces 3.31.0 Release.
- Red Hat OpenShift Dev Spaces 3.31 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/jetbrains-ide-rhel9 +8
- RHSA-2026:84734 Released 2026-10-19 · Red Hat rating CriticalRHOAI 3.4.5 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
Show 11 more Red Hat advisories
- RHSA-2026:79546 Released 2026-10-08 · Red Hat rating ImportantRed Hat Quay 3.12.23
- Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:77656 Released 2026-10-07 · Red Hat rating ImportantRed Hat Quay 3.9.27
- Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:73038 Released 2026-09-29 · Red Hat rating ImportantMulticluster Global Hub 1.8.2 security update
- Multicluster Global Hub 1.8.2 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
- RHSA-2026:72879 Released 2026-09-28 · Red Hat rating ImportantRed Hat Advanced Cluster Management for Kubernetes v2.17.3 security update
- Red Hat Advanced Cluster Management for Kubernetes 2.17 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +7
- RHSA-2026:69961 Released 2026-09-22 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.8.2-7.el9_8, podman-docker-6:5.8.2-7.el9_8, podman-plugins-6:5.8.2-7.el9_8 +2
- RHSA-2026:70201 Released 2026-09-22 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-9.el10_2, podman-docker-7:5.8.2-9.el10_2, podman-remote-7:5.8.2-9.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-9.el10_2
- RHSA-2026:68515 Released 2026-09-17 · Red Hat rating ImportantMulticluster Global Hub 1.8.2 security update
- Multicluster Global Hub 1.8.2 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
- RHSA-2026:68254 Released 2026-09-16 · Red Hat rating ImportantRed Hat Edge Manager Version 1.2.1 Security Update
- Red Hat Edge Manager 1.2 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +11
- RHSA-2026:68006 Released 2026-09-16 · Red Hat rating ImportantRed Hat Edge Manager Version 1.2.1 Security Update
- Red Hat Edge Manager 1.2 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
- RHSA-2026:66521 Released 2026-09-10 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.6.1
- Logging Subsystem for Red Hat OpenShift 6.6 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/lokistack-gateway-rhel9 +1
- RHSA-2026:52807 Released 2026-08-10 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images podman-5:6.0.2-2.2.hum1@aarch64, podman-5:6.0.2-2.2.hum1@src, podman-5:6.0.2-2.2.hum1@x86_64 +8
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| DPU kit for NVIDIA | Affected | No fix yet |
| Kernel Module Management Operator for Red Hat Openshift | Affected | No fix yet |
| Multicluster Engine for Kubernetes | Affected | No fix yet |
| Red Hat Build of Podman Desktop | Affected | No fix yet |
| Red Hat Ceph Storage 8 | Affected | No fix yet |
| Red Hat Ceph Storage 9 | Affected | No fix yet |
| Red Hat Certification Program for Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat Enterprise Linux 10 | Affected | No fix yet |
| Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet |
| Red Hat OpenShift Container Platform 5 | Affected | No fix yet |
| Red Hat OpenStack Platform 18.0 | Affected | No fix yet |
| Red Hat Quay 3 | Affected | No fix yet |
| Red Hat Trusted Artifact Signer | Affected | No fix yet |
| Red Hat Web Terminal | Affected | No fix yet |
| Logging Subsystem for Red Hat OpenShift 6.6 | Fixed | RHSA-2026:66521 |
| Multicluster Global Hub 1.8.2 | Fixed | RHSA-2026:68515, RHSA-2026:73038 |
| Red Hat Advanced Cluster Management for Kubernetes 2.17 | Fixed | RHSA-2026:72879 |
| Red Hat Edge Manager 1.2 | Fixed | RHSA-2026:68006, RHSA-2026:68254 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:70201 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:69961 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:70201 |
| Red Hat Hardened Images | Fixed | RHSA-2026:52807 |
| Red Hat OpenShift AI 3.4 | Fixed | RHSA-2026:84734, RHSA-2026:92510 |
| Red Hat OpenShift Dev Spaces 3.31 | Fixed | RHSA-2026:90321 |
| Red Hat Quay 3.12 | Fixed | RHSA-2026:79546 |
| Red Hat Quay 3.9 | Fixed | RHSA-2026:77656 |
Not affected: 25 products
- Confidential Compute Attestation
- Cryostat 4
- Logging Subsystem for Red Hat OpenShift 6.6
- Multicluster Global Hub 1.8.2
- OpenShift Developer Tools and Services
- Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat Advanced Cluster Management for Kubernetes 2.17
- Red Hat Ansible Automation Platform 2
- Red Hat Build of Kueue
- Red Hat Build of Podman Desktop
- Red Hat Edge Manager 1
- Red Hat Edge Manager 1.2
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Red Hat Hardened Images
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift AI 3.4
- Red Hat OpenShift Container Platform 4
- Red Hat OpenShift Container Platform 5
- Red Hat OpenShift Dev Spaces
- Red Hat OpenShift Dev Spaces 3.31
- Red Hat OpenShift Virtualization 4
- Red Hat Openshift Data Foundation 4
- Red Hat Quay 3.12
- Red Hat Quay 3.9
Timeline
- 2026-10-02 Threatist record created from CVE-2026-17106
- 2026-10-03 Alias added: GHSA-hfg8-hc9c-6c3h
- 2026-10-07 Affected versions changed · Red Hat
- 2026-10-07 Fix available: RHSA-2026:77656 · Red Hat
- 2026-10-08 Fix available: Red Hat Quay 3.9 · Red Hat
- 2026-10-09 Fix available: RHSA-2026:79546 · Red Hat
- 2026-10-09 Fix available: Red Hat Quay 3.12 · Red Hat
- 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
- 2026-10-20 Fix available: Red Hat OpenShift AI 3.4 · Red Hat
- 2026-10-29 Fix available: Red Hat OpenShift Dev Spaces 3.31 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:90321 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:92510 · Red Hat
- 2026-10-30 Affected versions changed · Red Hat
- 2026-10-30 Affected versions changed · Red Hat
References
Other 10
- https://docs.docker.com/desktop/release-notes/#4860
- https://github.com/docker/sbx-releases/releases/tag/v0.38.0
- https://docs.docker.com/engine/release-notes/29/#2970
- https://github.com/docker/cli/releases/tag/v29.7.0
- https://github.com/docker/compose/releases/tag/v5.4.0
- https://github.com/moby/moby/issues/52948
- https://github.com/bikini/exploitarium/tree/main/docker-cp-copyout-destination-escape
- https://github.com/moby/go-archive
- https://github.com/moby/moby/releases/tag/docker-v29.7.0
- https://www.imperva.com/blog/copyescape-taking-over-docker-hosts-with-docker-cp
More moby vulnerabilities
- TI-2021-12512 Moby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx CVSS 3.1HIGH 7.1
- TI-2024-27462 Moby authz zero length regression CVSS 3.1CRITICAL 10.0
- TI-2024-15672 BuildKit interactive containers API does not validate entitlements check CVSS 3.1CRITICAL 9.8
- TI-2024-15671 BuildKit possible host system access from mount stub cleaner CVSS 3.1CRITICAL 10.0
- TI-2026-26365 Moby: AuthZ plugin bypass with oversized request body CVSS 3.1HIGH 8.8
- TI-2026-27599 SpdyStream: DOS on CRI CVSS 4.0HIGH 8.7
Sources
- CVE-2026-17106 · CVE Program
- CVE-2026-17106 · NVD
- FIRST EPSS
- GHSA-hfg8-hc9c-6c3h · GitHub Advisory Database · CC BY 4.0
- CVE-2026-17106 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences