CVE-2026-101295

Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction.

Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), oc-mirror extracts tar entries from catalog image layers without validating that file paths resolve within the intended destination directory.

30. Sep 2026

Ausgewertete Quellen

• Red Hat
  https://access.redhat.com/errata/RHSA-2026:95746
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:95756
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:96283
• Red Hat
  https://access.redhat.com/security/cve/CVE-2026-101295
• Red Hat
  https://bugzilla.redhat.com/show_bug.cgi?id=2522941
• NVD
  CVE-2026-101295