Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
azure tardev-snapshotter can expose files via crafted archive
published 2 months ago
Summary
The tardev-snapshotter package uses a library that can follow malicious shortcuts (symlinks) when creating a backup of a folder. If a privileged process backs up a directory that an attacker can place files in, the backup may include files from elsewhere on the system, revealing their contents. Update the package to a version that fixes the library or avoid archiving untrusted directories until the fix is applied.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | tardev-snapshotter | <= 3.2.0.tardev1-10 |
Original advisory text
CVE-2026-70622 affecting package tardev-snapshotter 3.2.0.tardev1-10
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrusted directory, the function follows symlinks without verifying that resolved targets remain within the source root, causing out-of-bounds files to be included in the archive as regular files and disclosed to the attacker.
References
Timeline
Published10 Aug 2026
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-95589 · OSV
Track software like this
Free during beta