CVE-2026-54727

HighCVSS 8.2

Published: 29/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 29/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

In proot-distro before version 5.1.6, the restore function accepted hardlink entries whose linkname referenced another installed container without verifying the source. This allows copying files between isolated containers via a crafted archive.

Risk Assessment

An attacker can break container isolation by copying files between containers, potentially leading to data leakage or privilege escalation.

Recommendation

Update proot-distro to version 5.1.6 or later.

Other vulnerabilities in proot-distro

CVE-2026-54574High
In proot-distro before version 5.1.5, installation functions extracting tar archives and Docker layers did not validate archive-controlled symlink targets. This allows planting a symlink to a host path and writing files to the host filesystem.

Original NVD description (English source)

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a crafted restore archive to copy files between otherwise isolated containers. This issue is fixed in version 5.1.6.