Security Advisory

CVE-2025-69874

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-11 00:00:00

Last updated 2026-02-12 14:49:30

Assigner mitre

State PUBLISHED

Description

nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip() that allows remote attackers to write arbitrary files outside the intended extraction directory via a crafted tar archive containing path traversal sequence.

← Browse all CVEs View on cve.org ↗