AIKIDO-2026-10420

TL;DR

Affected versions of this package allow mutate.Extract() to pass untrusted tar entry names and link targets without ensuring they remain within the intended extraction root, enabling path traversal, symlink escape, and absolute path injection during image export or flatten operations. An attacker could craft a malicious container image so that, when a victim extracts its contents, files are written outside the target directory or links are created to arbitrary host paths, potentially overwriting sensitive files or planting attacker-controlled content in fixed system locations.