What’s Vulnerable › Vulnerabilities

CVE-2026-44788: SharpCompress: Directory traversal via directory entries in WriteToDirectory (zip slip variant)

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-05-26 · updated 2026-07-24
• Weakness: CWE-22

Description

SharpCompress is a fully managed C# library to deal with many compression types and formats. In 0.47.4 and earlier, a path traversal vulnerability in IArchive.WriteToDirectory() allows a malicious archive to create directories outside the intended extraction root. For TAR archives, this can be escalated to arbitrary file writes by chaining with a symlink entry, giving a full write primitive on the target filesystem subject to the permissions of the running process.

Affected products

• adamhathcock sharpcompress: through 0.47.4

References

• https://github.com/adamhathcock/sharpcompress/security/advisories/GHSA-6c8g-7p36-r338
• https://github.com/adamhathcock/sharpcompress/security/advisories/GHSA-6c8g-7p36-r338

Get alerted when CVE-2026-44788 or the next vulnerability affects your stack