CVE-2023-7216Medium· 5.3▾ TwilightPoC availableA path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow sym…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 29.2 · likelihood 0.2 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.9%
A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files to be written in arbitrary directories through symlinks.
cpiocpio (all versions)cpio (all versions)cpio (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Use the --no-absolute-filenames option to avoid this behaviour.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-1753High· 8.6A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers
CVE-2026-123037Medium· 6.7Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
CVE-2024-45770Medium· 4.4Pcp: pmpost symlink attack allows escalating pcp to root user
CVE-2013-0261High· 8.8Packstack: packstack: arbitrary file overwrite via symlink attack
CVE-2015-1197Low· 1.9cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
CVE-2026-117691Critical· 9.1Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter names