PT-2026-32712 · Rustc+1 · Rustc+1
Published
2026-04-13
·
Updated
2026-04-13
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
rustc versions prior to 1.91.1+dfsg~24.04-0ubuntu0.24.04.2
Description
tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could modify permissions of arbitrary directories outside the extraction root, potentially leading to privilege escalation.
Recommendations
Update to version 1.91.1+dfsg~24.04-0ubuntu0.24.04.2.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Rustc
Tar-Rs