Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-01T21:35:45 oras-go: oras-go: File store write outside working directory via symlink traversal 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CWE-22

A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.

Assisted Installer for Red Hat OpenShift Container Platform 2 Affected assisted/agent-preinstall-image-builder-rhel9 Deployment Validation Operator Affected dvo/deployment-validation-rhel8-operator Gatekeeper 3 Not affected gatekeeper/gatekeeper-rhel9 MCP Server for Red Hat OpenShift Affected openshift-mcp-beta/openshift-mcp-server-rhel9 Migration Toolkit for Virtualization Affected migration-toolkit-virtualization/mtv-validation-rhel9 Migration Toolkit for Virtualization Affected mtv-candidate/mtv-api-rhel9 Migration Toolkit for Virtualization Affected mtv-candidate/mtv-cli-download-rhel9 Migration Toolkit for Virtualization Affected mtv-candidate/mtv-controller-rhel9 Migration Toolkit for Virtualization Affected mtv-candidate/mtv-openstack-populator-rhel9 Migration Toolkit for Virtualization Affected mtv-candidate/mtv-operator-bundle Migration Toolkit for Virtualization Affected mtv-candidate/mtv-ova-provider-server-rhel9 Migration Toolkit for Virtualization Affected mtv-candidate/mtv-populator-controller-rhel9 Migration Toolkit for Virtualization Affected mtv-candidate/mtv-rhel9-operator Migration Toolkit for Virtualization Affected mtv-candidate/mtv-rhv-populator-rhel8 Migration Toolkit for Virtualization Affected mtv-candidate/mtv-validation-rhel9 Migration Toolkit for Virtualization Affected mtv-candidate/mtv-virt-v2v-rhel9 Migration Toolkit for Virtualization Affected mtv-candidate/mtv-vsphere-xcopy-volume-populator-rhel9 Multicluster Global Hub Not affected multicluster-globalhub/multicluster-globalhub-grafana-rhel9 OpenShift Developer Tools and Services Not affected helm OpenShift Lightspeed Affected openshift-lightspeed/openshift-mcp-server-rhel9 OpenShift Service Mesh 3 Affected openshift-service-mesh/istio-rhel9-operator Red Hat Advanced Cluster Management for Kubernetes 2 Affected rhacm2/multicloud-integrations-rhel9 Red Hat Advanced Cluster Management for Kubernetes 2 Affected rhacm2/multicluster-operators-channel-rhel9 Red Hat Advanced Cluster Management for Kubernetes 2 Affected rhacm2/multicluster-operators-subscription-rhel9 Red Hat Advanced Cluster Management for Kubernetes 2 Affected rhacm2/submariner-operator-bundle Red Hat Advanced Cluster Management for Kubernetes 2 Affected rhacm2/submariner-rhel9-operator Red Hat Advanced Cluster Security 4 Affected advanced-cluster-security/rhacs-main-rhel8 Red Hat Advanced Cluster Security 4 Not affected advanced-cluster-security/rhacs-main-rhel9 Red Hat Advanced Cluster Security 4 Not affected advanced-cluster-security/rhacs-operator-bundle Red Hat Advanced Cluster Security 4 Affected advanced-cluster-security/rhacs-rhel8-operator Red Hat Advanced Cluster Security 4 Not affected advanced-cluster-security/rhacs-rhel9-operator Red Hat Advanced Cluster Security 4 Affected advanced-cluster-security/rhacs-roxctl-rhel8 Red Hat Advanced Cluster Security 4 Not affected advanced-cluster-security/rhacs-roxctl-rhel9 Red Hat Advanced Cluster Security 4 Affected advanced-cluster-security/rhacs-scanner-v4-rhel8 Red Hat Advanced Cluster Security 4 Not affected advanced-cluster-security/rhacs-scanner-v4-rhel9 Red Hat Ceph Storage 9 Fix deferred rhceph/alloy-rhel10 Red Hat Developer Hub Affected rhdh/rhdh-must-gather-rhel9 Red Hat Edge Manager 1 Not affected flightctl Red Hat Edge Manager 1 Affected rhem/flightctl-alert-exporter-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-alert-exporter-rhel9 Red Hat Edge Manager 1 Affected rhem/flightctl-alertmanager-proxy-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-alertmanager-proxy-rhel9 Red Hat Edge Manager 1 Affected rhem/flightctl-api-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-api-rhel9 Red Hat Edge Manager 1 Affected rhem/flightctl-cli-artifacts-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-cli-artifacts-rhel9 Red Hat Edge Manager 1 Affected rhem/flightctl-db-setup-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-db-setup-rhel9 Red Hat Edge Manager 1 Affected rhem/flightctl-imagebuilder-api-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-imagebuilder-api-rhel9 Red Hat Edge Manager 1 Affected rhem/flightctl-imagebuilder-worker-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-imagebuilder-worker-rhel9 Red Hat Edge Manager 1 Affected rhem/flightctl-pam-issuer-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-pam-issuer-rhel9 Red Hat Edge Manager 1 Affected rhem/flightctl-periodic-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-periodic-rhel9 Red Hat Edge Manager 1 Affected rhem/flightctl-telemetry-gateway-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-telemetry-gateway-rhel9 Red Hat Edge Manager 1 Affected rhem/flightctl-userinfo-proxy-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-userinfo-proxy-rhel9 Red Hat Edge Manager 1 Affected rhem/flightctl-worker-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-worker-rhel9 Red Hat Hardened Images Not affected opentofu1.10 Red Hat Hardened Images Not affected opentofu1.11 Red Hat Hardened Images Not affected opentofu1.12 Red Hat Hardened Images Not affected oras Red Hat Hardened Images Not affected trivy Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-rhel9-operator Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-spark-operator-rhel9 Red Hat OpenShift Container Platform 4 Not affected openshift4/cnf-tests-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4-dev-preview-beta/openperouter-edge-rhel10-operator Red Hat OpenShift Container Platform 4 Affected openshift4-dev-preview-beta/openperouter-operator-bundle Red Hat OpenShift Container Platform 4 Affected openshift4-dev-preview-beta/openperouter-rhel9-operator Red Hat OpenShift Container Platform 4 Not affected openshift4/metallb-rhel8-operator Red Hat OpenShift Container Platform 4 Not affected openshift4/metallb-rhel9-operator Red Hat OpenShift Container Platform 4 Not affected openshift4/oc-mirror-plugin-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4/oc-mirror-plugin-rhel9 Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-ansible-operator Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-azure-cluster-api-controllers-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-cluster-ingress-rhel9-operator Red Hat OpenShift Container Platform 4 Affected openshift4/ose-cluster-olm-rhel9-operator Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-console Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-console-rhel9 Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-helm-operator Red Hat OpenShift Container Platform 4 Affected openshift4/ose-helm-rhel9-operator Red Hat OpenShift Container Platform 4 Affected openshift4/ose-node-feature-discovery-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-olm-catalogd-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-olm-operator-controller-rhel9 Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-olm-rukpak-rhel8 Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-olm-rukpak-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-operator-framework-tools-rhel9 Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-operator-lifecycle-manager Red Hat OpenShift Container Platform 4 Affected openshift4/ose-operator-lifecycle-manager-rhel9 Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-operator-registry Red Hat OpenShift Container Platform 4 Affected openshift4/ose-operator-registry-rhel9 Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-operator-sdk-rhel8 Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-operator-sdk-rhel9 Red Hat OpenShift Container Platform 4 Not affected openshift4/ztp-site-generate-rhel8 Red Hat Openshift Data Foundation 4 Fix deferred odf4/odf-multicluster-rhel9-operator Red Hat OpenShift GitOps Affected openshift-gitops-1/argocd-agent-rhel8 Red Hat OpenShift GitOps Affected openshift-gitops-1/argocd-agent-rhel9 Red Hat OpenShift GitOps Affected openshift-gitops-1/argocd-image-updater-rhel8 Red Hat OpenShift GitOps Affected openshift-gitops-1/argocd-image-updater-rhel9 Red Hat OpenShift GitOps Affected openshift-gitops-1/argocd-rhel8 Red Hat OpenShift GitOps Affected openshift-gitops-1/argocd-rhel9 Red Hat OpenShift GitOps Affected openshift-gitops-1/gitops-rhel8 Red Hat OpenShift GitOps Affected openshift-gitops-1/gitops-rhel8-operator Red Hat OpenShift GitOps Affected openshift-gitops-1/gitops-rhel9 Red Hat OpenShift GitOps Affected openshift-gitops-1/gitops-rhel9-operator Red Hat OpenStack Platform 16.2 Not affected rhosp-rhel8/osp-director-operator-bundle Red Hat OpenStack Platform 17.1 Not affected rhosp-rhel9/osp-director-operator-bundle Red Hat OpenStack Platform 18.0 Not affected rhoso-operators/openstack-operator-bundle Red Hat OpenStack Platform 18.0 Not affected rhoso-operators/rabbitmq-cluster-rhel9-operator Red Hat Trusted Artifact Signer Affected rhtas/ec-rhel9 Red Hat Trusted Artifact Signer Affected rhtas/policy-controller-rhel9-operator Red Hat Trusted Profile Analyzer Affected rhtpa/rhtpa-rhel9-operator Security Profiles Operator Affected compliance/openshift-security-profiles-operator-bundle Security Profiles Operator Affected compliance/openshift-security-profiles-rhel8-operator https://www.cve.org/CVERecord?id=CVE-2026-50162 https://nvd.nist.gov/vuln/detail/CVE-2026-50162 https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv