TI-2026-83179 CVE-2026-119704 · GHSA-wrmv-w7w7-jxc9
Symlink following in Bastille jail copy commands allows jail escape
Priority LOW 25
Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh, rcp.sh and jcp.sh subcommands that allows jailed users to escape jail isolation.