CVE-2026-79705

MEDIUM 4.5

Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers

CVSS Score

4.5

EPSS Score

0.4%

EPSS Percentile

35th

A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and create files outside the intended destination. Buildah itself uses chroot hardening and is not affected.

CWE	CWE-22
Vendor	red hat
Product	red hat hardened images
Published	Sep 15, 2026
Last Updated	Oct 30, 2026

Stay Ahead of the Next One

Get instant alerts for red hat red hat hardened images

Be the first to know when new medium vulnerabilities affecting red hat red hat hardened images are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Affected Versions

Red Hat / Red Hat Hardened Images

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Hardened Images

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4

All versions affected

Red Hat / Red Hat OpenShift Container Platform 5

All versions affected

Red Hat / Red Hat OpenShift Dev Spaces

All versions affected

Red Hat / Red Hat OpenShift Dev Spaces

All versions affected

Red Hat / Red Hat OpenShift Dev Spaces

All versions affected

Red Hat / Red Hat OpenShift Virtualization 4

All versions affected

Red Hat / Red Hat Quay 3

All versions affected

Red Hat / Red Hat Quay 3

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗

access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74861 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-79705 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2523419

Credits

Red Hat would like to thank Ibrahim Saglam, Junyi Liu, Oleh Konko, and Ron Masas for reporting this issue.