{"id":"CVE-2026-105712","revision":"765cf90e808e43a993a24fcd0ebbeec2","records":[{"revision":"765cf90e808e43a993a24fcd0ebbeec2","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-105712","aliases":[],"title":"gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory (aka -C) into an existing directory containing a pre-existing symlink, gpgtar can follow that symli…","description":"gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory (aka -C) into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected extraction directory. The write is limited by the extraction user's filesystem permissions. An archive extracted into a fresh empty directory does not have this risk.","state":0,"publishedAt":"2026-10-05T18:53:09.873+00:00","modifiedAt":"2026-10-05T19:09:30.98+00:00","affected":[{"ecosystem":"Vendor product","name":"GnuPG","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"product\": \"GnuPG\",\n                    \"vendor\": \"GnuPG\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"2.5.19\",\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","score":3.6,"severity":"LOW"}],"references":["https://static.dev.gnupg.org/T8159.html","https://github.com/gpg/gnupg/commit/7a2692fe5e580ae3bbb2a47abc4baaf1af65aa88","https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000504.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-105712","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-105712","identifiers":["CVE-2026-105712"]},"retained":false,"historicalAffected":[]}],"coverage":[]}