{"id":"CVE-2026-116137","title":"adm-zip: adm-zip: File integrity check bypass via duplicate archive entries (CVE-2026-116137)","summary":"A flaw was found in adm-zip. A remote attacker can exploit this issue by providing a specially crafted ZIP archive containing duplicate entries with equivalent path names to bypass validation checks. Consequently, an application may inspec…","severity":"low","cvss":3.7,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvssSource":"vendor","cwe":["CWE-41","CWE-436"],"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","affected":["cost_management_on_premise","advanced_cluster_management_for_kubernetes 2","build_of_podman_desktop","connectivity_link 1","developer_hub","enterprise_linux 8","enterprise_linux 9","fuse 7","openshift_ai_rhoai","openshift_container_platform 4","self_service_automation_portal 2"],"published":"2026-10-25","updated":"2026-10-25","sourceUpdated":"2026-10-25T12:23:36+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116137.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116137.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-116137"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2560378"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-116137"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116137"},{"url":"https://github.com/cthackers/adm-zip"},{"url":"https://github.com/cthackers/adm-zip/blob/cb2cf9ba4c7c865db426e2de1997cb41194d9872/adm-zip.js#L87"},{"url":"https://github.com/cthackers/adm-zip/blob/cb2cf9ba4c7c865db426e2de1997cb41194d9872/util/utils.js#L383"},{"url":"https://github.com/cthackers/adm-zip/blob/cb2cf9ba4c7c865db426e2de1997cb41194d9872/zipFile.js#L81-L92"},{"url":"https://github.com/cthackers/adm-zip/issues/587"},{"url":"https://www.vulncheck.com/advisories/adm-zip-through-0.6.1-duplicate-entry-validation-bypass-via-canonically-equivalent-names"}],"tags":["csaf","vex","red-hat","cve.org"],"ingestedAt":"2026-10-25T22:08:29.958Z","epss":0.00258,"epssPercentile":0.17393,"slug":"CVE-2026-116137","body":"## Overview\n\nA flaw was found in adm-zip. A remote attacker can exploit this issue by providing a specially crafted ZIP archive containing duplicate entries with equivalent path names to bypass validation checks. Consequently, an application may inspect benign file content during validation but write malicious content to the destination path upon extraction, leading to an integrity check bypass.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Low · affected: Cost Management On Premise, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Build of Podman Desktop, Red Hat Connectivity Link 1, Red Hat Developer Hub, Red Hat Enterprise Linux 8, … · no fix planned: Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Fuse 7, Cost Management On Premise, Red Hat Build of Podman Desktop, … · updated 2026-10-25 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116137.json)\n\n**adm-zip: adm-zip: File integrity check bypass via duplicate archive entries** — rated Low by Red Hat. Released 2026-10-25.\n\nAffected:\n\n- Cost Management On Premise\n- Red Hat Advanced Cluster Management for Kubernetes 2\n- Red Hat Build of Podman Desktop\n- Red Hat Connectivity Link 1\n- Red Hat Developer Hub\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat Fuse 7\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat OpenShift Container Platform 4\n- Self-service automation portal 2\n\nNo fix planned:\n\n- Red Hat Advanced Cluster Management for Kubernetes 2\n- Red Hat Fuse 7\n- Cost Management On Premise\n- Red Hat Build of Podman Desktop\n- Red Hat Connectivity Link 1\n- Red Hat Developer Hub\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat OpenShift Container Platform 4\n- Self-service automation portal 2\n\n## Remediation\n\nOut of support scope","depth":"sunlit","depthScore":20,"depthScoreParts":{"impact":20.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}