Log in Start free

Vulnerability · Published Oct 7, 2026 · Assigned by redhat

CVE-2026-107174Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction

Medium 6.4

In plain English

A medium-severity security flaw in OpenShift Serverless from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)6.4Medium
Exploit odds (30 days)0.3%top 78.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction directory. This allows the attacker to bypass sandbox boundaries, potentially leading to unauthorized information disclosure or file modification on the host system.

Affected products (as reported)

VendorProductVersions
Red Hat OpenShift Serverless see references
Red Hat OpenShift Serverless see references
Red Hat OpenShift Serverless see references
Red Hat OpenShift Source-to-Image (S2I) see references
Red Hat OpenShift Source-to-Image (S2I) see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat Web Terminal see references

Weakness: CWE-61 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

References