What’s Vulnerable › Products

GNU Tar vulnerabilities

20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your GNU Tar version is affected

Latest GNU Tar vulnerabilities

• CVE-2026-18477 — Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape (CVSS 4.4)
• CVE-2026-18508 — Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (CVSS 4.4)
• CVE-2026-5704 — Tar: tar: hidden file injection via crafted archives (CVSS 5.5)
• CVE-2025-45582 — (CVSS 4.1)
• CVE-2023-39804 — (CVSS 6.2)
• CVE-2022-48303 — (CVSS 5.5)
• CVE-2021-20193 — (CVSS 3.3)
• CVE-2019-9923 — (CVSS 7.5)
• CVE-2018-20482 — (CVSS 4.7)
• CVE-2016-6321 — (CVSS 7.5)
• CVE-2010-0624 — (CVSS 6.8)
• CVE-2007-4476 — (CVSS 7.5)
• CVE-2007-4131 — (CVSS 6.8)
• CVE-2006-6097 — (CVSS 4.0)
• CVE-2006-0300 — (CVSS 5.1)
• CVE-2005-1918 — (CVSS 2.6)
• CVE-2005-2541 — (CVSS 10.0)
• CVE-2002-1216 — (CVSS 5.0)
• CVE-2002-0399 — (CVSS 5.0)
• CVE-2001-1267 — (CVSS 2.1)