CVE-2026-109375

MEDIUM 6.1

Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction

CVSS Score

6.1

EPSS Score

0.0%

EPSS Percentile

0th

Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs. Attackers controlling sandbox code, such as a prompt-injected coding agent, can plant symbolic or hard links in the host data directory to write arbitrary files on the orchestrator host.

CWE	CWE-59
Vendor	vercel
Product	deepsec
Published	Oct 12, 2026

Stay Ahead of the Next One

Get instant alerts for vercel deepsec

Be the first to know when new medium vulnerabilities affecting vercel deepsec are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

None

Integrity

High

Availability

None

Affected Versions

Vercel / deepsec

0.1.0 < 1.1.17

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/vercel-labs/deepsec/pull/46 github.com: https://github.com/vercel-labs/deepsec/pull/47 github.com: https://github.com/vercel-labs/deepsec/commit/c5a4e4220ece72aee67c2ea21f4340e65f673fc1 github.com: https://github.com/vercel-labs/deepsec vulncheck.com: https://www.vulncheck.com/advisories/vercel-deepsec-before-1.1.17-arbitrary-file-write-via-symlink-in-sandbox-tarball-extraction

Credits

Yunus Aydın