181 lines
8.0 KiB
JSON
181 lines
8.0 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.2",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2026-62268",
|
|
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "GitHub_M",
|
|
"dateReserved": "2026-07-13T17:09:57.574Z",
|
|
"datePublished": "2026-11-05T20:28:48.031Z",
|
|
"dateUpdated": "2026-11-09T22:53:59.897Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"title": "borg extract might modify out-of-tree files when extracting maliciously crafted archives",
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"cweId": "CWE-59",
|
|
"lang": "en",
|
|
"description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')",
|
|
"type": "CWE"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"metrics": [
|
|
{
|
|
"cvssV4_0": {
|
|
"attackVector": "LOCAL",
|
|
"attackComplexity": "LOW",
|
|
"attackRequirements": "PRESENT",
|
|
"privilegesRequired": "HIGH",
|
|
"userInteraction": "ACTIVE",
|
|
"vulnConfidentialityImpact": "HIGH",
|
|
"vulnIntegrityImpact": "HIGH",
|
|
"vulnAvailabilityImpact": "NONE",
|
|
"subConfidentialityImpact": "NONE",
|
|
"subIntegrityImpact": "NONE",
|
|
"subAvailabilityImpact": "NONE",
|
|
"baseScore": 5.3,
|
|
"baseSeverity": "MEDIUM",
|
|
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
|
|
"version": "4.0"
|
|
}
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"name": "https://github.com/borgbackup/borg/security/advisories/GHSA-gfp8-w835-v44j",
|
|
"tags": [
|
|
"x_refsource_CONFIRM"
|
|
],
|
|
"url": "https://github.com/borgbackup/borg/security/advisories/GHSA-gfp8-w835-v44j"
|
|
},
|
|
{
|
|
"name": "https://github.com/borgbackup/borg/commit/0ac568e290518c3bbe781459978720dde7fab224",
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://github.com/borgbackup/borg/commit/0ac568e290518c3bbe781459978720dde7fab224"
|
|
},
|
|
{
|
|
"name": "https://github.com/borgbackup/borg/commit/141888f2fabcd57a300547c2aa63212cb213924d",
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://github.com/borgbackup/borg/commit/141888f2fabcd57a300547c2aa63212cb213924d"
|
|
},
|
|
{
|
|
"name": "https://github.com/borgbackup/borg/commit/2d632531028b09da8ab5d1450f89bebcc205d640",
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://github.com/borgbackup/borg/commit/2d632531028b09da8ab5d1450f89bebcc205d640"
|
|
},
|
|
{
|
|
"name": "https://github.com/borgbackup/borg/commit/3e9ed6d1ad6d3531b39c07b8ef3ecf41fce4437f",
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://github.com/borgbackup/borg/commit/3e9ed6d1ad6d3531b39c07b8ef3ecf41fce4437f"
|
|
},
|
|
{
|
|
"name": "https://github.com/borgbackup/borg/commit/4f37fdfed10b50559a0dd333b0d5581c642af329",
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://github.com/borgbackup/borg/commit/4f37fdfed10b50559a0dd333b0d5581c642af329"
|
|
},
|
|
{
|
|
"name": "https://github.com/borgbackup/borg/commit/d907f2cb57337041c4fa55ca4682895535e5076b",
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://github.com/borgbackup/borg/commit/d907f2cb57337041c4fa55ca4682895535e5076b"
|
|
},
|
|
{
|
|
"name": "https://github.com/borgbackup/borg/releases/tag/1.4.5",
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://github.com/borgbackup/borg/releases/tag/1.4.5"
|
|
},
|
|
{
|
|
"name": "https://github.com/borgbackup/borg/releases/tag/2.0.0b22",
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://github.com/borgbackup/borg/releases/tag/2.0.0b22"
|
|
}
|
|
],
|
|
"affected": [
|
|
{
|
|
"vendor": "borgbackup",
|
|
"product": "borg",
|
|
"versions": [
|
|
{
|
|
"version": "< 1.4.5",
|
|
"status": "affected"
|
|
},
|
|
{
|
|
"version": ">= 2.0.0b1, < 2.0.0b22",
|
|
"status": "affected"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"providerMetadata": {
|
|
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
|
|
"shortName": "GitHub_M",
|
|
"dateUpdated": "2026-11-05T20:28:48.031Z"
|
|
},
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. Prior to 1.4.5 and 2.0.0b22, extracting a malicious archive can follow a symlinked parent path or resolve embedded dot-dot path components and delete or overwrite files outside the extraction directory. A crafted slave hardlink can also use an attacker-controlled hardlink source outside the extraction directory and hard-link that file into the restored tree, disclosing its contents. Creating the malicious archive requires repository access and, for encrypted or authenticated repositories, the Borg key and passphrase; a victim must then extract the archive. This issue is fixed in versions 1.4.5 and 2.0.0b22."
|
|
}
|
|
],
|
|
"source": {
|
|
"advisory": "GHSA-gfp8-w835-v44j",
|
|
"discovery": "UNKNOWN"
|
|
}
|
|
},
|
|
"adp": [
|
|
{
|
|
"metrics": [
|
|
{
|
|
"other": {
|
|
"type": "ssvc",
|
|
"content": {
|
|
"timestamp": "2026-11-09T22:53:46.813570Z",
|
|
"id": "CVE-2026-62268",
|
|
"options": [
|
|
{
|
|
"Exploitation": "none"
|
|
},
|
|
{
|
|
"Automatable": "no"
|
|
},
|
|
{
|
|
"Technical Impact": "partial"
|
|
}
|
|
],
|
|
"role": "CISA Coordinator",
|
|
"version": "2.0.3"
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"title": "CISA ADP Vulnrichment",
|
|
"providerMetadata": {
|
|
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
|
"shortName": "CISA-ADP",
|
|
"dateUpdated": "2026-11-09T22:53:59.897Z"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
} |