Read the docs
TI-2026-85659 Aliases CVE-2026-62268

borg extract can modify files outside the extraction directory

Priority LOW 23CWE-59Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
Active
Attack complexity
Low
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.

Summary

borgbackup borg before 1.4.5 and from 2.0.0b1 before 2.0.0b22 is affected. Extracting a malicious archive can follow a symlinked parent path or resolve embedded parent directory components (CWE-59), overwriting or deleting files outside the extraction directory. A crafted hardlink can also hard-link an outside file into the restored tree, disclosing its contents. The attacker needs repository access and, for encrypted or authenticated repositories, the Borg key and passphrase, and a victim must extract the archive.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. Prior to 1.4.5 and 2.0.0b22, extracting a malicious archive can follow a symlinked parent path or resolve embedded dot-dot path components and delete or overwrite files outside the extraction directory. A crafted slave hardlink can also use an attacker-controlled hardlink source outside the extraction directory and hard-link that file into the restored tree, disclosing its contents. Creating the malicious archive requires repository access and, for encrypted or authenticated repositories, the Borg key and passphrase; a victim must then extract the archive. This issue is fixed in versions 1.4.5 and 2.0.0b22.

Why it matters now

EPSS 0.00159 5th percentileScored 2026-11-07
Fix Fixed borg (borgbackup): 1.4.5, 2.0.0b22borgbackup (PyPI): 1.4.5, 2.0.0b22

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
borgbackupborgbefore 1.4.5; 2.0.0b1 to before 2.0.0b221.4.5, 2.0.0b22Patch availableCNA
—borgbackup (PyPI)before 1.4.51.4.5Patch availableGHSA-gfp8-w835-v44j
—borgbackup (PyPI)2.0.0b1 to before 2.0.0b222.0.0b22Patch availableGHSA-gfp8-w835-v44j
  • borg Vendorborgbackup Affected before 1.4.5; 2.0.0b1 to before 2.0.0b22 Fixed in 1.4.5, 2.0.0b22 Patch available CNA
  • borgbackup (PyPI) Vendor— Affected before 1.4.5 Fixed in 1.4.5 Patch available GHSA-gfp8-w835-v44j
  • borgbackup (PyPI) Vendor— Affected 2.0.0b1 to before 2.0.0b22 Fixed in 2.0.0b22 Patch available GHSA-gfp8-w835-v44j

Remediation

Upgrade borg to 1.4.5 for the 1.x branch or to 2.0.0b22 for the 2.0 beta branch. The PyPI borgbackup packages are fixed in 1.4.5 and 2.0.0b22 respectively.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

  • Fix · CNA borg (borgbackup) Fixed in 1.4.5, 2.0.0b22
  • Fix · GHSA-gfp8-w835-v44j borgbackup (PyPI) Fixed in 1.4.5 Advisory →
  • Fix · GHSA-gfp8-w835-v44j borgbackup (PyPI) Fixed in 2.0.0b22 Advisory →

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-11-05 Threatist record created from CVE-2026-62268
  2. 2026-11-06 Affected versions changed · Red Hat
  3. 2026-11-06 CVSS score added · Red Hat

References

Other 10

  • TI-2017-11651 Incorrect implementation of access controls allows remote users to override repository… CVSS 3.0HIGH 8.8
  • TI-2023-18605 Archive spoofing vulnerability in borgbackup CVSS 3.1MEDIUM 4.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences