Skip to content
OpenAdvisories

Vendor

qbee-io

1 known vulnerabilities.

Products

transport 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.0
    CVE-2026-55828

    qbee transport: Symlink-chain path traversal in tar extraction (one level outside destination)

    qbee transport is a remote access transport protocol implementation. Prior to 1.26.25, the extractTar routine uses strictly lexical path validation that does not account for on-disk symlinks created earlier in the extraction process. A crafted tar archive can…

    qbee-io transport go.qbee.io/transport Go