AIKIDO-2026-427079

TL;DR

The Turborepo CLI restores remote cache archives, copies prune patch files, serves a local query API, and invokes git using repository-controlled inputs. Before the fix, chained archive symlinks could resolve outside the repo root, prune patch paths and query file reads lacked realpath confinement, and SCM refs starting with - could inject git options such as --output. Repo-configured login URLs could also redirect browser auth to attacker-controlled hosts. The release hardens archive restore with anchor realpath checks, confines prune and query paths, strips dangerous mode bits from cache restore, rejects option-like git refs, and blocks untrusted repo-sourced auth redirects unless explicitly user supplied.