CVE-2026-88069

Name of the Vulnerable Software and Affected Versions Pandora (affected versions not specified)

Description A path traversal issue exists in the archive extraction worker. This occurs when the system processes a specially crafted archive or disk image and fails to ensure that the destination paths remain within the intended extraction directory. An attacker can submit a malicious file using path traversal sequences to write content outside the designated directory, which may lead to the unauthorized modification of system or application files, denial of service, or further system compromise depending on process permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.