SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-79699

MEDIUM · CVSS 4.4 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability exists in the containers/storage library that allows a crafted tar archive with a malicious whiteout header to overwrite the extraction destination directory with an arbitrary file. This could lead to unauthorized file manipulation or data loss during the extraction process. Organizations using this library should prioritize addressing this issue to mitigate potential impacts on their containerized environments.

CVE
CVE-2026-79699
Severity
MEDIUM
CVSS
4.4
EPSS
0.13%

Original NVD Description

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header (e.g. victim/.wh.) can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or ApplyUncompressedLayer.