podman-container-tools/buildah · Security
Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive
- GHSA ID
- GHSA-49p4-px3h-rq49
- CVE ID
- CVE-2026-44517
- Severity
- medium
- Published
- Updated
- CVSS
- 6.3 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
- CVSS v3
- 6.3 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Description
Impact
When processing a build contexts or add/copy instructions, a malicious server serving a Git repository or a tar archive file can cause files outside of the build context directory to be included in the build context or copied into the build.
Patches
Fixed in Buildah 1.44 and 1.43.2.
CWEs
- CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')