{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-40090", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-09T00:39:12.206Z", "datePublished": "2026-04-14T23:46:18.804Z", "dateUpdated": "2026-04-15T16:13:54.180Z"}, "containers": {"cna": {"title": "Zarf has a Path Traversal via Malicious Package Metadata.Name \u2014 Arbitrary File Write", "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "lang": "en", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/zarf-dev/zarf/security/advisories/GHSA-pj97-4p9w-gx3q", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/zarf-dev/zarf/security/advisories/GHSA-pj97-4p9w-gx3q"}, {"name": "https://github.com/zarf-dev/zarf/pull/4793", "tags": ["x_refsource_MISC"], "url": "https://github.com/zarf-dev/zarf/pull/4793"}], "affected": [{"vendor": "zarf-dev", "product": "zarf", "versions": [{"version": ">= 0.23.0, < 0.74.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-14T23:46:18.804Z"}, "descriptions": [{"lang": "en", "value": "Zarf is an Airgap Native Packager Manager for Kubernetes. Versions 0.23.0 through 0.74.1 contain an arbitrary file write vulnerability in the zarf package inspect sbom and zarf package inspect documentation subcommands. These subcommands output file paths are constructed by joining a user-controlled output directory with the package's Metadata.Name field read directly from the untrusted package's zarf.yaml manifest. Although Metadata.Name is validated against a regex on package creation, an attacker can unarchive a package to modify the Metadata.Name field to contain path traversal sequences such as ../../etc/cron.d/malicious or absolute paths like /home/user/.ssh/authorized_keys, along with the corresponding files inside SBOMS.tar. This allows writing attacker-controlled content to arbitrary filesystem locations within the permissions of the user running the inspect command. This issue has been fixed in version 0.74.2."}], "source": {"advisory": "GHSA-pj97-4p9w-gx3q", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-15T16:04:08.362745Z", "id": "CVE-2026-40090", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-15T16:13:54.180Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-40090", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-15T16:04:08.362745Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-15T16:04:12.028Z"}}], "cna": {"title": "Zarf has a Path Traversal via Malicious Package Metadata.Name \u2014 Arbitrary File Write", "source": {"advisory": "GHSA-pj97-4p9w-gx3q", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "zarf-dev", "product": "zarf", "versions": [{"status": "affected", "version": ">= 0.23.0, < 0.74.2"}]}], "references": [{"url": "https://github.com/zarf-dev/zarf/security/advisories/GHSA-pj97-4p9w-gx3q", "name": "https://github.com/zarf-dev/zarf/security/advisories/GHSA-pj97-4p9w-gx3q", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/zarf-dev/zarf/pull/4793", "name": "https://github.com/zarf-dev/zarf/pull/4793", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Zarf is an Airgap Native Packager Manager for Kubernetes. Versions 0.23.0 through 0.74.1 contain an arbitrary file write vulnerability in the zarf package inspect sbom and zarf package inspect documentation subcommands. These subcommands output file paths are constructed by joining a user-controlled output directory with the package's Metadata.Name field read directly from the untrusted package's zarf.yaml manifest. Although Metadata.Name is validated against a regex on package creation, an attacker can unarchive a package to modify the Metadata.Name field to contain path traversal sequences such as ../../etc/cron.d/malicious or absolute paths like /home/user/.ssh/authorized_keys, along with the corresponding files inside SBOMS.tar. This allows writing attacker-controlled content to arbitrary filesystem locations within the permissions of the user running the inspect command. This issue has been fixed in version 0.74.2."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-14T23:46:18.804Z"}}}, "cveMetadata": {"cveId": "CVE-2026-40090", "state": "PUBLISHED", "dateUpdated": "2026-04-15T16:13:54.180Z", "dateReserved": "2026-04-09T00:39:12.206Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-04-14T23:46:18.804Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:lfprojects:zarf:*:*:*:*:*:*:*:*", "matchCriteriaId": "50C2C7C3-9B1C-4BFE-9450-7101F43C9FC0", "versionEndExcluding": "0.74.2", "versionStartIncluding": "0.23.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Zarf is an Airgap Native Packager Manager for Kubernetes. Versions 0.23.0 through 0.74.1 contain an arbitrary file write vulnerability in the zarf package inspect sbom and zarf package inspect documentation subcommands. These subcommands output file paths are constructed by joining a user-controlled output directory with the package's Metadata.Name field read directly from the untrusted package's zarf.yaml manifest. Although Metadata.Name is validated against a regex on package creation, an attacker can unarchive a package to modify the Metadata.Name field to contain path traversal sequences such as ../../etc/cron.d/malicious or absolute paths like /home/user/.ssh/authorized_keys, along with the corresponding files inside SBOMS.tar. This allows writing attacker-controlled content to arbitrary filesystem locations within the permissions of the user running the inspect command. This issue has been fixed in version 0.74.2."}], "id": "CVE-2026-40090", "lastModified": "2026-04-23T17:16:31.410", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 4.2, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2026-04-15T04:17:43.310", "references": [{"source": "security-advisories@github.com", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/zarf-dev/zarf/pull/4793"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://github.com/zarf-dev/zarf/security/advisories/GHSA-pj97-4p9w-gx3q"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "security-advisories@github.com", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0.23.0,0.74.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "zarf", "source": "cna", "vendor": "zarf-dev"}, "product": "zarf", "vendor": "zarf-dev"}], "analysis": {"en": {"generated_at": "2026-04-15T01:21:07.898222+00:00", "value": {"mitigation_remediation": ["Apply the latest Zarf release (v0.74.2 or newer) to eliminate the flaw.", "If updating is not immediately possible, restrict the use of `zarf package inspect` to trusted packages only and run the command with the lowest-privilege user.", "Implement a monitoring mechanism to detect unexpected file writes in critical directories (e.g., /etc, /.ssh, /var/spool/cron) following inspection operations."], "summary": {"action": "Patch ASAP", "impact": "Arbitrary File Write"}, "threat_synthesis": {"affected_systems": "The issue affects Zarf version 0.23.0 through 0.74.1, inclusive. All deployments of the Zarf Airgap Native Packager Manager utilizing the package inspect sbom or documentation subcommands are susceptible when processing untrusted packages. The vulnerability persists until the release of version 0.74.2, which contains the fix.", "description_and_impact": "A malicious Zarf package can embed path traversal sequences in its Metadata.Name field, allowing the inspect subcommands to construct file paths that escape the intended output directory. The vulnerability enables an attacker to write arbitrary files with the permissions of the user executing the inspect command, potentially replacing or creating system configuration files such as cron jobs or SSH keys. This flaw, classified as CWE-22, results in uncontrolled file write, with confidentiality, integrity, and availability risks arising from the ability to modify critical system files.", "risk_and_exploitability": "The CVSS score of 7.1 reflects a moderate to high severity. Because exploitation requires the attacker to have local access to a machine running the inspect command, the EPSS score is noted as not available, and the vulnerability is not listed in the CISA KEV catalog. Attackers can influence the system by executing a crafted package during inspection, which only requires user-level privileges. The risk is significant for environments where unsanitized packages are inspected or where the inspection process runs under privileged accounts."}}}}, "created": "2026-04-15T13:48:23.610444+00:00", "updated": "2026-04-15T13:49:14.875062+00:00", "vendors": ["zarf-dev", "zarf-dev$PRODUCT$zarf"]}