CVE-2026-42497

A flaw was found in perl-Archive-Tar. This vulnerability allows an attacker to craft a malicious tar archive that, when extracted, can create hardlinks to arbitrary files outside the intended extraction directory. This could lead to the modification of sensitive files on the system, potentially resulting in data corruption or unauthorized access.

This Moderate impact vulnerability in perl-Archive-Tar allows an attacker to modify arbitrary files on the system. By crafting a malicious tar archive, an attacker can exploit a path traversal flaw during extraction to create hardlinks outside the intended directory. This could lead to data corruption or unauthorized changes to sensitive system files if a user extracts a specially crafted archive.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.