The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the filesystem operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of the destination directory. An attacker who controls the contents of an archive can create or overwrite files at arbitrary paths writable by the extracting process.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3140 advisory.

    A custom client can produce such an upload request to the BuildKit daemon that files can escape from the     BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit     control API to issue builds, e.g., bypass authentication, etc. (CVE-2026-15789)

    A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp     directory. The action that can normally be used to delete files inside the build container rootfs can     escape into the real host temp directory. (CVE-2026-15791)

    A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing     with a panic. (CVE-2026-15792)

    BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when     checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation     on the host. (CVE-2026-15793)

    The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the     ApplyLayer helpers) do not confine filesystem operations to the destination directory. A crafted archive     can create or overwrite files outside the intended destination. (CVE-2026-17106)

    Memory exhaustion DoS causing OOM kill of containerd process

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq (CVE-2026-47262)

    Previously, after a channel has been established, a malicious peer could send crafted messages that would     deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled     explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of     buffering and blocking. (CVE-2026-56855)

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a     crafted build request, and executor/oci/spec_linux.go treated the unsupported value as a non-sandbox mode     without requiring the security.insecure entitlement. This disabled Seccomp and AppArmor protections for     the build container even though Linux capabilities remained restricted. This issue is fixed in version     0.31.1. (CVE-2026-61711)

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files     without an upper bound while resolving a username to a user identifier or group identifier in     executor/oci/user.go and solver/llbsolver/ops/user_linux.go. A malicious base image or build could provide     oversized files that exhausted memory during user resolution and caused out-of-memory termination of the     buildkitd process. This issue is fixed in version 0.31.1. (CVE-2026-61712)

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit     daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid     permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is     fixed in version 0.31.2. (CVE-2026-75593)

    Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious     peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an     atomic established state, set when a channel becomes usable. Until such a time, handlePacket drops every     packet other than the open confirmation/failure, without blocking and without tearing down the connection.
    (CVE-2026-78662)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of runfinch-finch installed on the remote host is prior to 1.19.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-142 advisory.

    A custom client can produce such an upload request to the BuildKit daemon that files can escape from the     BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit     control API to issue builds, e.g., bypass authentication, etc. (CVE-2026-15789)

    A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp     directory. The action that can normally be used to delete files inside the build container rootfs can     escape into the real host temp directory. (CVE-2026-15791)

    A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing     with a panic. (CVE-2026-15792)

    BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when     checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation     on the host. (CVE-2026-15793)

    The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the     ApplyLayer helpers) do not confine filesystem operations to the destination directory. A crafted archive     can create or overwrite files outside the intended destination. (CVE-2026-17106)

    Memory exhaustion DoS causing OOM kill of containerd process

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq (CVE-2026-47262)

    Previously, after a channel has been established, a malicious peer could send crafted messages that would     deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled     explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of     buffering and blocking. (CVE-2026-56855)

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a     crafted build request, and executor/oci/spec_linux.go treated the unsupported value as a non-sandbox mode     without requiring the security.insecure entitlement. This disabled Seccomp and AppArmor protections for     the build container even though Linux capabilities remained restricted. This issue is fixed in version     0.31.1. (CVE-2026-61711)

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files     without an upper bound while resolving a username to a user identifier or group identifier in     executor/oci/user.go and solver/llbsolver/ops/user_linux.go. A malicious base image or build could provide     oversized files that exhausted memory during user resolution and caused out-of-memory termination of the     buildkitd process. This issue is fixed in version 0.31.1. (CVE-2026-61712)

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit     daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid     permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is     fixed in version 0.31.2. (CVE-2026-75593)

    Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious     peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an     atomic established state, set when a channel becomes usable. Until such a time, handlePacket drops every     packet other than the open confirmation/failure, without blocking and without tearing down the connection.
    (CVE-2026-78662)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8590121cf7 advisory.

    release v2.0.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1908:10 advisory.

    * podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
      * podman: golang net/url: Denial of Service from quadratic complexity in path resolution     (CVE-2026-56860)
      * podman: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)
      * podman: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)
      * podman: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)
      * podman: Quadlet install --replace non-truncating write retains removed host-access directives     (CVE-2026-19730)
      * podman: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses     (CVE-2026-39830)
      * podman: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service     (CVE-2026-56853)
      * podman: moby/go-archive: Arbitrary file write via link following in tar extraction (CVE-2026-17106)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69961 advisory.

    * podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)

    * podman: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)

    * podman: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)

    * podman: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

    * podman: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

    * podman: Quadlet install --replace non-truncating write retains removed host-access directives     (CVE-2026-19730)

    * podman: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses     (CVE-2026-39830)

    * podman: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)

    * podman: moby/go-archive: Arbitrary file write via link following in tar extraction (CVE-2026-17106)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70201 advisory.

    * podman: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application     (CVE-2026-33810)

    * podman: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)

    * podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)

    * podman: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)

    * podman: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)

    * podman: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

    * podman: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

    * podman: golang.org/x/text: Denial of Service via invalid UTF-8 input (CVE-2026-56852)

    * podman: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)

    * podman: Quadlet install --replace non-truncating write retains removed host-access directives     (CVE-2026-19730)

    * podman: moby/go-archive: Arbitrary file write via link following in tar extraction (CVE-2026-17106)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69961 advisory.

    - rebuild with golang-1.26.7 fixing CVE-2026-33818 CVE-2026-56860       CVE-2026-56859 CVE-2026-56858 CVE-2026-56862 CVE-2026-56853       CVE-2026-19730 CVE-2026-39830 CVE-2026-17106

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70201 advisory.

    - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves:
      RHEL-250818
    - rebuild for CVE-2026-33810

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:70201 advisory.

    * podman: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application     (CVE-2026-33810)
      * podman: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service     (CVE-2026-56853)
      * podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
      * podman: golang net/url: Denial of Service from quadratic complexity in path resolution     (CVE-2026-56860)
      * podman: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)
      * podman: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)
      * podman: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)
      * podman: golang.org/x/text: Denial of Service via invalid UTF-8 input (CVE-2026-56852)
      * podman: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)
      * podman: Quadlet install --replace non-truncating write retains removed host-access directives     (CVE-2026-19730)
      * podman: moby/go-archive: Arbitrary file write via link following in tar extraction (CVE-2026-17106)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69961 advisory.

    * podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
      * podman: golang net/url: Denial of Service from quadratic complexity in path resolution     (CVE-2026-56860)
      * podman: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)
      * podman: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)
      * podman: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)
      * podman: Quadlet install --replace non-truncating write retains removed host-access directives     (CVE-2026-19730)
      * podman: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses     (CVE-2026-39830)
      * podman: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service     (CVE-2026-56853)
      * podman: moby/go-archive: Arbitrary file write via link following in tar extraction (CVE-2026-17106)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69961 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)

    * podman: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)

    * podman: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)

    * podman: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

    * podman: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

    * podman: Quadlet install --replace non-truncating write retains removed host-access directives     (CVE-2026-19730)

    * podman: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses     (CVE-2026-39830)

    * podman: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)

    * podman: moby/go-archive: Arbitrary file write via link following in tar extraction (CVE-2026-17106)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70201 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * podman: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application     (CVE-2026-33810)

    * podman: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)

    * podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)

    * podman: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)

    * podman: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)

    * podman: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

    * podman: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

    * podman: golang.org/x/text: Denial of Service via invalid UTF-8 input (CVE-2026-56852)

    * podman: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)

    * podman: Quadlet install --replace non-truncating write retains removed host-access directives     (CVE-2026-19730)

    * podman: moby/go-archive: Arbitrary file write via link following in tar extraction (CVE-2026-17106)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0872 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2026-17106:
    The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the     ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor     decides where each archive entry lands using lexical string checks and then performs the filesystem     operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of     the destination directory. An attacker who controls the contents of an archive can create or overwrite     files at arbitrary paths writable by the extracting process.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21611-1 advisory.

    Changes in apptainer:

    - Update github.com/moby/go-archive to v0.3.0 to fix CVE-2026-17106:
      The tar extraction routines in moby/go-archive do not confine       filesystem operations to the destination directory. A crafted       archive can create or overwrite files outside the intended       destination (bsc#1275248).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the
    ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor
    decides where each archive entry lands using lexical string checks and then performs the filesystem
    operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of
    the destination directory. An attacker who controls the contents of an archive can create or overwrite
    files at arbitrary paths writable by the extracting process. (CVE-2026-17106)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the     ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor     decides where each archive entry lands using lexical string checks and then performs the filesystem     operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of     the destination directory. An attacker who controls the contents of an archive can create or overwrite     files at arbitrary paths writable by the extracting process. (CVE-2026-17106)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
351079	Amazon Linux 2023 : runfinch-finch (ALAS2023-2026-3140)	Nessus	Amazon Linux Local Security Checks	Local	high
351054	Amazon Linux 2 : runfinch-finch (ALASDOCKER-2026-142)	Nessus	Amazon Linux Local Security Checks	Local	high
349774	Fedora 45 : prometheus-podman-exporter (2026-8590121cf7)	Nessus	Fedora Local Security Checks	Local	high
349730	MiracleLinux 9 : podman-5.8.2-7.el9_8 (AXSA:2026-1908:10)	Nessus	Miracle Linux Local Security Checks	Local	high
349528	RockyLinux 9 : podman (RLSA-2026:69961)	Nessus	Rocky Linux Local Security Checks	Local	high
349523	RockyLinux 10 : podman (RLSA-2026:70201)	Nessus	Rocky Linux Local Security Checks	Local	high
349494	Oracle Linux 9 : podman (ELSA-2026-69961)	Nessus	Oracle Linux Local Security Checks	Local	high
349490	Oracle Linux 10 : podman (ELSA-2026-70201)	Nessus	Oracle Linux Local Security Checks	Local	high
349482	AlmaLinux 10 : podman (ALSA-2026:70201)	Nessus	Alma Linux Local Security Checks	Local	high
349480	AlmaLinux 9 : podman (ALSA-2026:69961)	Nessus	Alma Linux Local Security Checks	Local	high
349104	RHEL 9 : podman (RHSA-2026:69961)	Nessus	Red Hat Local Security Checks	Local	high
348799	RHEL 10 : podman (RHSA-2026:70201)	Nessus	Red Hat Local Security Checks	Local	high
342065	TencentOS Server 4: moby (TSSA-2026:0872)	Nessus	Tencent Local Security Checks	Local	high
339033	openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:21611-1)	Nessus	SuSE Local Security Checks	Local	high
446091	SCA: security update for github.com/moby/go-archive (GHSA-hfg8-hc9c-6c3h)	Tenable Cloud Security	SCA Checks	Local	high
446091	SCA: security update for github.com/moby/go-archive (GHSA-hfg8-hc9c-6c3h)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
338087	Linux Distros Unpatched Vulnerability : CVE-2026-17106	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-17106

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high