Skip to content
Fencer Vulns
high 7.1

CVE-2026-17106 json

Tar extraction in moby/go-archive can write outside the destination directory via link following

published 2026-08-18 2 mo ago modified 2026-09-10 59 d ago also BIT-docker-cli-2026-17106 , EUVD-2026-61112 , GHSA-hfg8-hc9c-6c3h , GO-2026-6253

cvss
7.1
version 4.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 38%
public exploits
0
none known

Summary

The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the filesystem operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of the destination directory. An attacker who controls the contents of an archive can create or overwrite files at arbitrary paths writable by the extracting process.

Patch / fix

  • go github.com/moby/go-archive 0.3.0
  • bitnami docker-cli 29.7.0
  • moby go-archive 0.3.0
  • Docker Docker Sandboxes 0.38.0
  • Docker Docker Desktop 4.86.0
  • Docker Docker Engine 29.7.0
  • Docker Docker CLI 29.7.0
  • Docker Docker Compose 5.4.0
  • golang-github-moby-go-archive Debian 14 0.3.3-1

debian advisories DEBIAN-CVE-2026-17106

  • podman RHEL 10.2 7:5.8.2-9.el10_2
  • podman-tests RHEL 10.2 7:5.8.2-9.el10_2
  • podman-docker RHEL 10.2 7:5.8.2-9.el10_2
  • podman-remote RHEL 10.2 7:5.8.2-9.el10_2
  • podman RHEL 9 6:5.8.2-7.el9_8
  • podman-tests RHEL 9 6:5.8.2-7.el9_8
  • podman-docker RHEL 9 6:5.8.2-7.el9_8
  • podman-remote RHEL 9 6:5.8.2-7.el9_8

red hat advisories RHSA-2026:70201RHSA-2026:69961RHSA-2026:52807

  • govulncheck-vulndb SLES for SAP applications 16.0, SLES 16.0 0.0.20260827T195228-160000.1.1
  • apptainer SLES 15 SP6-LTSS, SLE Module for Package Hub 15 SP7, SLE Module for HPC 15 SP7 1.5.3-150600.4.37.1

suse advisories SUSE-SU-2026:23625-1SUSE-SU-2026:3863-1

  • buildah openSUSE Tumbleweed 1.46.0-1.1
  • buildpacks-cli openSUSE Tumbleweed 0.40.10-1.1
  • podman openSUSE Tumbleweed 6.1.2-1.1
  • govulncheck-vulndb openSUSE Leap 16.0 0.0.20260827T195228-160000.1.1
  • apptainer openSUSE Leap 16.0 1.5.3-bp160.2.1
  • apptainer openSUSE Tumbleweed 1.5.3-2.1

opensuse advisories openSUSE-SU-2026:12341-1openSUSE-SU-2026:12260-1openSUSE-SU-2026:12068-1openSUSE-SU-2026:21761-1openSUSE-SU-2026:21611-1openSUSE-SU-2026:11544-1

  • podman AlmaLinux 9 6:5.8.2-7.el9_8
  • podman-tests AlmaLinux 9 6:5.8.2-7.el9_8
  • podman-docker AlmaLinux 9 6:5.8.2-7.el9_8
  • podman-remote AlmaLinux 9 6:5.8.2-7.el9_8
  • podman-plugins AlmaLinux 9 6:5.8.2-7.el9_8
  • podman AlmaLinux 10 7:5.8.2-9.el10_2.alma.1
  • podman-tests AlmaLinux 10 7:5.8.2-9.el10_2.alma.1
  • podman-docker AlmaLinux 10 7:5.8.2-9.el10_2.alma.1

almalinux advisories ALSA-2026:69961ALSA-2026:70201

  • podman Rocky Linux 10 7:5.8.2-9.el10_2
  • podman Rocky Linux 9 6:5.8.2-7.el9_8

rocky linux advisories RLSA-2026:70201RLSA-2026:69961

  • docker-cli Azure Linux 3.0 25.0.7-5
  • moby-engine Azure Linux 3.0 25.0.3-20

azure linux advisories AZL-97004AZL-97007

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-17106 updated cvss 7.8

github.com/moby/go-archive: moby/go-archive: Arbitrary file write via link following in tar extraction

  • Red Hat DPU kit for NVIDIA dpu-kit-for-nvidia/must-gather-rhel10 Red Hat Kernel Module Management Operator for Red Hat Openshift kmm/kernel-module-management-must-gather-rhel9
    affected: workaround, no fix available
  • Red Hat Multicluster Engine for Kubernetes multicluster-engine/must-gather-rhel9, multicluster-engine/assisted-installer-rhel8, multicluster-engine/assisted-installer-rhel9, multicluster-engine/assisted-service-8-rhel8, multicluster-engine/assisted-service-9-rhel9, multicluster-engine/assisted-installer-agent-rhel8, +3 more
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat Build of Podman Desktop rh-podman-desktop.git 1.1.0 Red Hat Ceph Storage 8 rhceph/grafana-rhel9
    affected: workaround, no fix available
  • Red Hat Ceph Storage 9 rhceph-ci/alloy, rhceph/alloy-rhel10, rhceph/grafana-rhel10
    affected: workaround, no fix available “Fix deferred”
  • Red Hat Certification Program for Red Hat Enterprise Linux 9 rhcertification/redhat-certification-system-ai-10 Red Hat Enterprise Linux 9 ubi9/buildah, rhel9/buildah Red Hat Enterprise Linux 10 ubi10/buildah, rhel10/buildah, rhel10/rhel-bootc, rhel10-eus/rhel-10.2-bootc, rhel10/bootc-image-builder Red Hat OpenShift AI (RHOAI) rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9, rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9, rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9, rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9, rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9, rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9, +9 more Red Hat OpenShift Container Platform 4 openshift-clients, openshift-clients-redistributable, openshift4/ose-machine-os-images-rhel9, openshift4/kube-compare-artifacts-rhel9, openshift4/ose-baremetal-installer-rhel9, openshift4/ose-secrets-store-csi-mustgather-rhel9 Red Hat OpenShift Container Platform 5 openshift-clients, openshift5/ose-deployer-rhel9, openshift5/ose-must-gather-rhel9, openshift5/ose-cli-artifacts-rhel9, openshift5/ose-machine-os-images-rhel9, openshift5/kube-compare-artifacts-rhel9, +1 more
    +4 more products
    Red Hat OpenStack Platform 18.0 rhoso-operators/prometheus-podman-exporter-rhel9 Red Hat Quay 3 quay/quay-builder-rhel8, quay/quay-builder-rhel9 Red Hat Trusted Artifact Signer rhtas/ec-rhel9 Red Hat Web Terminal web-terminal/web-terminal-tooling-rhel9
    affected: workaround, no fix available
  • Red Hat Logging Subsystem for Red Hat OpenShift 6.6 openshift-logging/cluster-logging-rhel9-operator 1788439505
    fixed: vendor fix RHSA-2026:66521
  • Red Hat Multicluster Global Hub 1.8.2 multicluster-globalhub/multicluster-globalhub-grafana-rhel9 1788441983, multicluster-globalhub/multicluster-globalhub-grafana-rhel9 1790639009
    fixed: vendor fix RHSA-2026:68515
  • Red Hat Advanced Cluster Management for Kubernetes 2.17 rhacm2/acm-grafana-rhel9 1790240693
    fixed: vendor fix RHSA-2026:72879
show 15 more
  • Red Hat Edge Manager 1.2 rhem/flightctl-api-rhel9 1789485317, rhem/flightctl-api-rhel10 1789485653, rhem/flightctl-worker-rhel9 1789488061, rhem/flightctl-worker-rhel10 1789486740, rhem/flightctl-db-setup-rhel9 1789485698, rhem/flightctl-periodic-rhel9 1789485282, +18 more
    fixed: vendor fix RHSA-2026:68006
  • Red Hat Enterprise Linux AppStream (v. 9) podman 5.8.2-7.el9_8, podman-tests 5.8.2-7.el9_8, podman-docker 5.8.2-7.el9_8, podman-remote 5.8.2-7.el9_8, podman-plugins 5.8.2-7.el9_8
    fixed: vendor fix RHSA-2026:69961
  • Red Hat Enterprise Linux AppStream (v. 10) podman 5.8.2-9.el10_2, podman-docker 5.8.2-9.el10_2, podman-remote 5.8.2-9.el10_2 Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests 5.8.2-9.el10_2
    fixed: vendor fix RHSA-2026:70201
  • Red Hat Hardened Images podman 6.0.2-2.2.hum1, podmansh 6.0.2-2.2.hum1, podman-docker 6.0.2-2.2.hum1, podman-remote 6.0.2-2.2.hum1, podman-machine 6.0.2-2.2.hum1
    fixed: vendor fix RHSA-2026:52807
  • Red Hat OpenShift AI 3.4 rhoai/odh-model-registry-rhel9 1791869365, rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 1792688615, rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 1792721192, rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 1792721265
    fixed: vendor fix RHSA-2026:84734
  • Red Hat OpenShift Dev Spaces 3.31 devspaces/traefik-rhel9 1792464177
    fixed: vendor fix RHSA-2026:90321
  • Red Hat Quay 3.9 quay/quay-rhel8 1790808443
    fixed: vendor fix RHSA-2026:77656
  • Red Hat Quay 3.12 quay/quay-rhel8 1791314514
    fixed: vendor fix RHSA-2026:79546
  • Red Hat Confidential Compute Attestation openshift-sandboxed-containers/osc-rhel9-operator, openshift-sandboxed-containers/osc-must-gather-rhel9, openshift-sandboxed-containers/osc-podvm-builder-rhel9
    not affected: vulnerable code not in execute path
  • Red Hat Cryostat 4 cryostat/cryostat-storage-rhel9
    not affected: component not present
  • Red Hat Logging Subsystem for Red Hat OpenShift 6.6 openshift-logging/vector-rhel9 1788439747, openshift-logging/eventrouter-rhel9 1788375796, openshift-logging/logging-loki-rhel9 1788156390, openshift-logging/loki-rhel9-operator 1788154255, openshift-logging/opa-openshift-rhel9 1788153362, openshift-logging/loki-operator-bundle 1788158124, +3 more Red Hat Multicluster Global Hub 1.8.2 multicluster-globalhub/multicluster-globalhub-agent-rhel9 1788359470, multicluster-globalhub/multicluster-globalhub-agent-rhel9 1790638612, multicluster-globalhub/multicluster-globalhub-manager-rhel9 1788359454, multicluster-globalhub/multicluster-globalhub-rhel9-operator 1788359461, multicluster-globalhub/multicluster-globalhub-rhel9-operator 1790638386, multicluster-globalhub/multicluster-globalhub-operator-bundle 1788496240, +3 more Red Hat OpenShift Developer Tools and Services ocp-tools-4/jenkins-rhel9, ocp-tools-4/jenkins-agent-base-rhel9
    not affected: vulnerable code not present
  • Red Hat Advanced Cluster Management for Kubernetes 2 rhacm2/acm-must-gather-rhel9
    not affected: vulnerable code not in execute path
  • Red Hat Advanced Cluster Management for Kubernetes 2.17 rhacm2/thanos-rhel9 1790187978, rhacm2/acm-cli-rhel9 1790190098, rhacm2/console-rhel9 1790242754, rhacm2/prometheus-rhel9 1790194461, rhacm2/acm-search-v2-rhel9 1790187727, rhacm2/node-exporter-rhel9 1790197886, +39 more
    not affected: vulnerable code not present
  • Red Hat Ansible Automation Platform 2 ansible-automation-platform-26/aap-must-gather-rhel9, ansible-automation-platform-27/aap-must-gather-rhel9 Red Hat Build of Kueue kueue/kueue-must-gather-rhel9
    not affected: vulnerable code not in execute path
  • Red Hat Build of Podman Desktop rh-podman-desktop 3c6fc75a2a6cf5bb9b8a667fddcbbf428132badc Red Hat Edge Manager 1 flightctl 1.2.0-1.el10 Red Hat Edge Manager 1.2 rhem/flightctl-ui-rhel9 1789486750, rhem/flightctl-ui-rhel10 1789488111, rhem/flightctl-ui-ocp-rhel9 1789486476, rhem/flightctl-ui-ocp-rhel10 1789485920
    not affected: vulnerable code not present

13 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
total
Assessed
2 mo ago

Exploit prediction

0.44% chance of exploitation in the next 30 days, higher than 38% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/masasron/CopyEscape-CVE-2026-17106 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 4.0 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CNA 4.0 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected packages

ecosystem package affected fixed in
go github.com/moby/go-archive
<0.3.0
0.3.0
bitnami docker-cli
<29.7.0
29.7.0

Affected products

  • moby go-archive
  • Docker Docker Sandboxes
  • Docker Docker Desktop
  • Docker Docker Engine
  • Docker Docker CLI
  • Docker Docker Compose

Classification

Weakness
  • CWE-59 Improper Link Resolution Before File Access
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.