AIKIDO-2026-10914

TL;DR

When a tar stream places a PAX extended header before intermediary extension records such as a GNU longname block, the crate applies pending PAX metadata to those extension headers instead of the next file entry. This desynchronizes parsing relative to POSIX pax and other tar implementations, so a crafted archive can list or extract different members depending on the parser. An attacker can use that differential to smuggle or hide files during extraction. The fix skips applying PAX overrides to extension header types and associates them only with the following file entry.