CVE-2026-79699
MEDIUM
NVD
CVSS Score
4.4
Severity
MEDIUM
Published
Sep 15, 2026
Vendor
unknown
Description
A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header (e.g. victim/.wh.) can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or ApplyUncompressedLayer.