{"id":"CVE-2026-19693","title":"extract-zip: extract-zip: Arbitrary file write via symlink in archive (CVE-2026-19693)","summary":"A flaw was found in extract-zip. This vulnerability allows a remote attacker to perform an arbitrary file write outside the intended destination directory. By crafting a malicious zip archive containing a symbolic link (symlink) and a regu…","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cvssSource":"vendor","cwe":["CWE-59","CWE-22"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","affected":["node_healthcheck_operator","openshift_pipelines","build_of_podman_desktop","ceph_storage 4","enterprise_linux_ai_rhel_ai 3","fuse 7","openshift_ai_rhoai","openshift_gitops","openshift_ai 3.4"],"patched":["openshift_ai 3.4"],"published":"2026-08-17","updated":"2026-10-19","sourceUpdated":"2026-10-19T11:10:29+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-19693.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-19693.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-19693"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517432"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19693"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19693"},{"url":"https://github.com/max-mapper/extract-zip"},{"url":"https://www.npmjs.com/package/extract-zip"},{"url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"url":"https://github.com/max-mapper/extract-zip/pull/160"},{"url":"https://github.com/advisories/GHSA-7pqw-9j4j-h8q3"}],"tags":["csaf","vex","red-hat","nvd","ghsa","npm"],"epss":0.00453,"epssPercentile":0.39151,"aliases":["GHSA-7pqw-9j4j-h8q3"],"ecosystem":"npm","ingestedAt":"2026-09-08T21:11:12.322Z","slug":"CVE-2026-19693","body":"## Overview\n\nA flaw was found in extract-zip. This vulnerability allows a remote attacker to perform an arbitrary file write outside the intended destination directory. By crafting a malicious zip archive containing a symbolic link (symlink) and a regular file with the same name, the attacker can bypass security checks. The extract-zip utility incorrectly validates only the parent directory, enabling the attacker to write files to arbitrary locations on the system.\n\n## Vendor advisories\n\n- **RHSA-2026:84734** · Red Hat · fixed in: Red Hat OpenShift AI 3.4 · released 2026-10-19 · [advisory](https://access.redhat.com/errata/RHSA-2026:84734)\n- **Red Hat VEX** · Important · affected: Node HealthCheck Operator, OpenShift Pipelines, Red Hat Build of Podman Desktop, Red Hat Ceph Storage 4, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat Fuse 7, … · no fix planned: Red Hat Build of Podman Desktop, Red Hat Fuse 7, Red Hat OpenShift GitOps, Red Hat Ceph Storage 4, … · updated 2026-10-19 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-19693.json)\n\n**extract-zip: extract-zip: Arbitrary file write via symlink in archive** — rated Important by Red Hat. Released 2026-08-17, updated 2026-10-19.\n\nAffected:\n\n- Node HealthCheck Operator\n- OpenShift Pipelines\n- Red Hat Build of Podman Desktop\n- Red Hat Ceph Storage 4\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat Fuse 7\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat OpenShift GitOps\n\nFixed:\n\n- Red Hat OpenShift AI 3.4\n\nNo fix planned:\n\n- Red Hat Build of Podman Desktop\n- Red Hat Fuse 7\n- Red Hat OpenShift GitOps\n- Red Hat Ceph Storage 4\n- Node HealthCheck Operator\n- OpenShift Pipelines\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n\nNot affected:\n\n- Red Hat OpenShift AI 3.4\n- Multicluster Engine for Kubernetes\n- OpenShift Service Mesh 3\n- Red Hat Advanced Cluster Management for Kubernetes 2\n- Red Hat AMQ Broker 7\n- Red Hat Ansible Automation Platform 2\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat Hardened Images\n\n## Remediation\n\nFor Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/ https://access.redhat.com/errata/RHSA-2026:84734\n\nWorkarounds / mitigations:\n\n- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\n## Package advisory (CVE-2026-19693)\n\nAffected packages:\n\n- `extract-zip <= 2.0.1`\n\nSource: https://github.com/advisories/GHSA-7pqw-9j4j-h8q3","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}