CVE-2026-70622MediumCVSS 6.5

tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all()

Published
August 14, 2026
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2026-70622 →

🎯 Affected products13

  • azl3 clamav 1.5.3-1 on Azure Linux 3.0
  • azl3 clamav 1.5.4-2 on Azure Linux 3.0
  • azl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0
  • azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0
  • azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0
  • azl3 kata-containers-cc 3.15.0.aks0-16 on Azure Linux 3.0
  • azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0
  • azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0
  • azl3 rpm-ostree 2024.4-11 on Azure Linux 3.0
  • azl3 rust 1.75.0-30 on Azure Linux 3.0
  • azl3 rust 1.90.0-10 on Azure Linux 3.0
  • azl3 trident 0.26.0-1 on Azure Linux 3.0
  • azl3 trident 0.28.0-1 on Azure Linux 3.0

✅ Remediation

Security Update KBRelease Notes (Security Update)

🔗 References (2)