Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-01T21:35:45 oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N CWE-22

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link("victim.secret", "<extract_base>/payload.tar.gz/evil_cwd_link") to resolve header.Linkname against the process current working directory for a Typeflag=TypeLink entry such as Name=payload.tar.gz/evil_cwd_link and Linkname="victim.secret" with io.deis.oras.content.unpack: "true", which can expose or tamper with files such as .env, .git/config, .aws/credentials, and ~/.ssh/config. This issue is fixed in version 2.6.2.

A flaw was found in oras-go, a Go library used for managing OCI (Open Container Initiative) artifacts. An attacker can exploit this vulnerability by providing a specially crafted tarball containing a malicious hardlink. When this tarball is extracted, the hardlink can be manipulated to point to files outside the intended extraction location, specifically within the victim's current working directory. This allows an attacker to read sensitive information from the system, and in some cases, could lead to unauthorized access to critical system files if the component is operating with elevated privileges.

A flaw was found in oras-go. The ensureLinkPath tar extraction helper validates that a hardlink's target resolves inside the extract base directory, but returns the original unresolved target string instead of the validated path. When os.Link() is called with a relative Linkname, it resolves against the process's current working directory (CWD), not the extract directory. An attacker controlling an OCI registry can craft a tarball layer with a malicious hardlink entry whose relative Linkname escapes the extract directory, creating a hardlink to arbitrary files in the victim's CWD. Exploitation requires the victim to run `oras pull` (or code using the oras-go file store) against an attacker-controlled registry with auto-extract enabled (io.deis.oras.content.unpack annotation set to true). In typical Red Hat deployments, container registries are curated and trusted, reducing the likelihood of exploitation. The resulting hardlink shares an inode with the target file, allowing the attacker to read its contents through the extracted archive. Upgrade to oras-go v2.6.1 or later. Gatekeeper 3 Fix deferred gatekeeper/gatekeeper-rhel9 Multicluster Global Hub Fix deferred multicluster-globalhub/multicluster-globalhub-grafana-rhel9 OpenShift Service Mesh 3 Fix deferred openshift-service-mesh/istio-rhel9-operator Red Hat OpenShift Container Platform 4 Fix deferred openshift4/cnf-tests-rhel8 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/metallb-rhel8-operator Red Hat OpenShift Container Platform 4 Fix deferred openshift4/metallb-rhel9-operator Red Hat OpenShift Container Platform 4 Fix deferred openshift4/oc-mirror-plugin-rhel8 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/oc-mirror-plugin-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-ansible-operator Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-azure-cluster-api-controllers-rhel8 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-console Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-console-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-helm-operator Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-helm-rhel9-operator Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-olm-catalogd-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-olm-operator-controller-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-olm-rukpak-rhel8 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-olm-rukpak-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-operator-framework-tools-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-operator-lifecycle-manager Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-operator-lifecycle-manager-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-operator-registry Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-operator-registry-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-operator-sdk-rhel8 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-operator-sdk-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ztp-site-generate-rhel8 Red Hat OpenStack Platform 16.2 Fix deferred rhosp-rhel8/osp-director-operator-bundle Red Hat OpenStack Platform 17.1 Fix deferred rhosp-rhel9/osp-director-operator-bundle Red Hat OpenStack Platform 18.0 Fix deferred rhoso-operators/openstack-operator-bundle Red Hat OpenStack Platform 18.0 Fix deferred rhoso-operators/rabbitmq-cluster-rhel9-operator https://www.cve.org/CVERecord?id=CVE-2026-50163 https://nvd.nist.gov/vuln/detail/CVE-2026-50163 https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp