CVE-2026-5704
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.
Risk Assessment
The organization is at risk of malicious files being introduced into the system, which could lead to system integrity compromise, backdoor installation, or other malware.
Recommendation
It is recommended to update the tar utility to a patched version and to exercise caution when extracting archives from untrusted sources. Also implement anomaly detection mechanisms for files.
Other vulnerabilities in tar
Original NVD description (English source)
A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS