CVE-2026-79655

Name of the Vulnerable Software and Affected Versions sos (affected versions not specified)

Description A flaw in the sos clean utility within the sos package allows a local attacker to create or overwrite arbitrary files. The issue stems from a path traversal flaw during the extraction of tar archives, where symlink and hardlink targets are not properly validated. This allows an attacker to write files to any location on the system using the privileges of the sos clean process, which typically executes as root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.