EUVD-2026-36766
GHSA-x4gv-m4gg-cwm5
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Arbitrary file write is an integrity impact (I:H) with possible availability effect from overwriting files (A:L); no read primitive so C:N; network AV and PR:N assume the common untrusted-upload deployment.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
3DescriptionCVE.org
In OCaml-tar before 3.4.0, a crafted archive with ../ path segments in its name allows escaping the current working directory. This is not desired behavior, and tar(1) rejects such extractions, but ocaml-tar decompresses it anyway. The impact is that it allows arbitrary file writes outside of the desired extraction directory (to an attacker that can reach a tar decompression endpoint).
AnalysisAI
Arbitrary file write in ocaml-tar before 3.4.0 lets remote attackers escape the intended extraction directory using '../' path segments embedded in archive member names. Unlike the standard tar(1) utility, which rejects such traversal, ocaml-tar decompresses the crafted entries anyway, writing files to attacker-chosen locations outside the target directory. There is publicly available exploit code exists per SSVC (POC), though EPSS remains low at 0.15% and it is not listed in CISA KEV.
Technical ContextAI
ocaml-tar is a pure-OCaml library for reading and writing Unix tar archives, commonly embedded in OCaml applications and services (including MirageOS-style unikernels and CI/build tooling) that need to unpack archives without shelling out to the system tar binary. The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory / Path Traversal): during extraction the library trusts the file name recorded in each tar header and does not canonicalize or reject relative '../' components, so a member named like '../../etc/foo' resolves outside the extraction root. CPE data is uninformative here (the feed carries only a placeholder 'cpe:2.3:a:n/a:n/a:*'), so the affected component identity rests on the description and the upstream OCaml Security advisory (OSEC-2026-08) rather than a structured NVD CPE match.
RemediationAI
Upgrade ocaml-tar to version 3.4.0 or later, which rejects archive entries containing traversal segments (Vendor-released patch: 3.4.0). Rebuild and redeploy any application, unikernel, or service that vendors or pins ocaml-tar as a dependency, since the fix must be recompiled into consumers. Where an immediate upgrade is not possible, the specific compensating control is to validate and canonicalize every archive member name before writing - reject any entry whose resolved path escapes the intended extraction root (any '../' component or absolute path) - or restrict decompression to trusted, authenticated sources only and run extraction under a low-privilege account with a chroot/jailed working directory so a traversal write cannot reach sensitive paths; the trade-off is added validation code and reduced flexibility for archives that legitimately use relative layouts. Consult the OCaml Security advisory (https://osv.dev/vulnerability/OSEC-2026-08) for exact fix details.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today