Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-42496

Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target. A subsequent open through the extracted name reads or writes the attacker chosen path.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a7210e0846ec294da1bae5c91d96f850b66c2b40feaee79c6d13f786971530c1
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
3

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 6 assertions

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"perl-Archive-Tar","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.38-6.el9_8.1","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/affected/3

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"perl-Archive-Tar","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.30-2.el8_10","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/affected/2

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"],"defaultStatus":"unknown","packageName":"perl-Archive-Tar","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/affected/4

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"perl-Archive-Tar","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.02-512.el10_2.1","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/affected/0

{"collectionURL":"https://cpan.org/modules","defaultStatus":"unaffected","packageName":"Archive-Tar","product":"Archive::Tar","programFiles":["lib/Archive/Tar.pm"],"programRoutines":[{"name":"Archive::Tar::_make_special_file"}],"repo":"https://github.com/jib/archive-tar-new","vendor":"BINGOS","versions":[{"lessThan":"3.08","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/cna/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"perl:5.32","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020260616084412.651ee29f","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/affected/1
cvss · 2 assertions

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/0/metrics/0/cvssV3_1

{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/metrics/1/cvssV3_1
cwe · 2 assertions

{"cweId":"CWE-22","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/problemTypes/0/descriptions/0

{"cweId":"CWE-59","description":"CWE-59 Improper Link Resolution Before File Access ('Link Following')","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/cna/problemTypes/0/descriptions/0

Affected products and versions

6 source assertions
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"perl-Archive-Tar","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.38-6.el9_8.1","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/affected/3
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"perl-Archive-Tar","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.30-2.el8_10","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/affected/2
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"],"defaultStatus":"unknown","packageName":"perl-Archive-Tar","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/affected/4
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"perl-Archive-Tar","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.02-512.el10_2.1","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/affected/0
{"collectionURL":"https://cpan.org/modules","defaultStatus":"unaffected","packageName":"Archive-Tar","product":"Archive::Tar","programFiles":["lib/Archive/Tar.pm"],"programRoutines":[{"name":"Archive::Tar::_make_special_file"}],"repo":"https://github.com/jib/archive-tar-new","vendor":"BINGOS","versions":[{"lessThan":"3.08","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/cna/affected/0
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"perl:5.32","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020260616084412.651ee29f","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/affected/1

Provider-owned CVSS observations

2 source assertions
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/0/metrics/0/cvssV3_1
{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/metrics/1/cvssV3_1

CWE assertions

2 source assertions
{"cweId":"CWE-22","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/problemTypes/0/descriptions/0
{"cweId":"CWE-59","description":"CWE-59 Improper Link Resolution Before File Access ('Link Following')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/cna/problemTypes/0/descriptions/0

Source references

10 source assertions
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:30851"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/references/4
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:30852"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/references/6
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:30856"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/references/5
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:30857"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/references/3
{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-42496"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/references/0
{"name":"RHBZ#2481314","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2481314"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/references/1
{"tags":["patch"],"url":"https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/cna/references/0
{"tags":["release-notes"],"url":"https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/cna/references/1
{"tags":["x_sadp-csaf-vex"],"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42496.json"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/adp/1/references/2
{"tags":["related"],"url":"https://www.cve.org/CVERecord?id=CVE-2026-42497"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:58400a4e868a26abd2df18d962ac77ba8c8ecf690289672f25ac917c6b5cc898 · sha256:5bcc47d4c9b8e25a… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer