Skip to content
OpenAdvisories
High · 8.2 Public exploit CVE-2026-23745 EUVD-2026-2909GHSA-8qq5-rm4j-mr97

node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization

Published Jan 16, 2026 · Updated Sep 7, 2026 · Assigned by GitHub_M

Vendor: isaacs Product: node-tar Package: code-server Package: jupyter-base-notebook Package: katib-earlystopping Package: katib-suggestion-goptuna-compat Package: katib-suggestion-hyperband Package: katib-suggestion-hyperopt Package: katib-suggestion-nas-darts Package: katib-suggestion-nas-enas Package: katib-suggestion-optuna-enas Package: katib-suggestion-pbt-enas Package: katib-suggestion-skopt-enas Package: katib-tfevent-metricscollector Package: kubeflow-centraldashboard Package: kubeflow-pipelines-frontend Package: lerna Package: node-gyp Package: node-tar Package: node-tar Package: npm Package: opensearch-dashboards-3 Package: pnpm-stage0 Package: prism Package: pulumi-language-nodejs Package: py3.10-jupyterlab Package: py3.11-jupyterlab Package: py3.12-jupyterlab Package: py3.13-jupyterlab Package: renovate Package: saf Package: sqlpad Package: tar Package: tileserver-gl Package: vitess-23 Ecosystem: Debian Ecosystem: npm Ecosystem: Ubuntu Ecosystem: Wolfi

Description

node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure behavior). This allows malicious archives to bypass the extraction root restriction, leading to Arbitrary File Overwrite via hardlinks and Symlink Poisoning via absolute symlink targets. This vulnerability is fixed in 7.5.3.

Affected products

VendorProductAffectedFixed
isaacs node-tar < 7.5.3 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 node-tar 6.2.1+ds1+~cs6.1.13-6 —
Debian 13 node-tar 6.2.1+~cs7.0.8-1+deb13u1 —
Debian 12 node-tar 6.1.13+~cs7.0.5-1+deb12u1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS node-tar No fix yet —
Ubuntu 25.10 node-tar No fix yet —
Ubuntu 24.04 LTS node-tar No fix yet —
Ubuntu 22.04 LTS node-tar No fix yet —
Ubuntu 18.04 LTS node-tar No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS node-tar No fix yet —
Ubuntu Pro 16.04 LTS node-tar No fix yet —
Ubuntu Pro 14.04 LTS node-tar No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 sgx-mpa +7 2.26-7.el10 RHSA-2026:18480
RHEL 9 sgx-mpa +7 2.26-7.el9 RHSA-2026:18868

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 sgx-mpa +6 2.26-7.el10 ALSA-2026:18480
AlmaLinux 9 sgx-mpa +6 2.26-7.el9 ALSA-2026:18868

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 linux-sgx 2.26-7.el10 RLSA-2026:18480
Rocky Linux 9 linux-sgx 2.26-7.el9 RLSA-2026:18868

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 nodejs20 +4 1:20.20.0-1.amzn2023.0.2 ALAS2023-2026-1464
Amazon Linux 2023 nodejs20-npm 1:10.8.2-1.20.20.0.1.amzn2023.0.2 ALAS2023-2026-1464
Amazon Linux 2023 nodejs22 +4 1:22.22.0-1.amzn2023.0.2 ALAS2023-2026-1465
Amazon Linux 2023 nodejs22-npm 1:10.9.4-1.22.22.0.1.amzn2023.0.2 ALAS2023-2026-1465
Amazon Linux 2023 nodejs24 +4 1:24.14.0-1.amzn2023.0.1 ALAS2023-2026-1466
Amazon Linux 2023 nodejs24-npm 1:11.9.0-1.24.14.0.1.amzn2023.0.1 ALAS2023-2026-1466
Amazon Linux 2023 v8-11.3-devel 3:11.3.244.8-1.20.20.0.1.amzn2023.0.2 ALAS2023-2026-1464
Amazon Linux 2023 v8-12.4-devel 3:12.4.254.21-1.22.22.0.1.amzn2023.0.2 ALAS2023-2026-1465
Amazon Linux 2023 v8-13.6-devel 3:13.6.233.17-1.24.14.0.1.amzn2023.0.1 ALAS2023-2026-1466

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 sgx-mpa +6 2.26-7.el10 ELSA-2026-18480
Oracle Linux 9 sgx-mpa +6 2.26-7.el9 ELSA-2026-18868

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling code-server 4.106.3-r2 —
Wolfi rolling jupyter-base-notebook 7.6.3-r2 —
Wolfi rolling katib-earlystopping +8 0.19.0-r31 —
Wolfi rolling katib-suggestion-goptuna-compat 0.19.0-r40 —
Wolfi rolling kubeflow-centraldashboard 1.10.0-r10 —
Wolfi rolling kubeflow-pipelines-frontend 2.15.0-r10 —
Wolfi rolling lerna 9.0.3-r1 —
Wolfi rolling node-gyp 12.2.0-r0 —
Wolfi rolling npm 11.8.0-r0 —
Wolfi rolling opensearch-dashboards-3 3.5.0-r0 —
Wolfi rolling pnpm-stage0 8.7.4-r6 —
Wolfi rolling prism 5.14.3-r2 —
Wolfi rolling pulumi-language-nodejs 3.215.0-r1 —
Wolfi rolling py3.10-jupyterlab +3 4.6.1-r1 —
Wolfi rolling renovate 42.92.4-r0 —
Wolfi rolling saf 1.6.0-r0 —
Wolfi rolling sqlpad 7.5.7-r6 —
Wolfi rolling tileserver-gl 5.5.0-r2 —
Wolfi rolling vitess-23 23.0.1-r0 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 3 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
npm tar < 7.5.3 7.5.3 GHSA-8qq5-rm4j-mr97

Advisories 13

References