CVE-2026-54448

Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive (.tgz), its custom tar unpacker reads each entry with io.ReadAll(tr) and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to gigabytes, causing the Trivy process to be killed by the OS OOM killer. This vulnerability is fixed in 0.71.0.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/aquasecurity/trivy/pull/10718	Issue Tracking Third Party Advisory
https://github.com/aquasecurity/trivy/security/advisories/GHSA-q3fv-x8vg-qqm4	Third Party Advisory
https://github.com/aquasecurity/trivy/pull/10718	Issue Tracking Third Party Advisory
https://github.com/aquasecurity/trivy/security/advisories/GHSA-q3fv-x8vg-qqm4	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:aquasec:trivy:*:*:*:*:*:go:*:*

History

25 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Trivy es un escáner de seguridad. Antes de la versión 0.71.0, cuando Trivy escanea un archivo de gráfico Helm (.tgz), su descompresor tar personalizado lee cada entrada con io.ReadAll(tr) y sin límite de tamaño. Un atacante que puede colocar un archivo .tgz malicioso en la ruta escaneada puede crear un archivo comprimido pequeño que se descomprime a gigabytes, lo que provoca que el proceso de Trivy sea terminado por el ’OOM killer’ del sistema operativo. Esta vulnerabilidad está corregida en la versión 0.71.0.

Information

Published : 2026-06-25 17:16

Updated : 2026-10-25 22:10

NVD link : CVE-2026-54448

Mitre link : CVE-2026-54448

CVE.ORG link : CVE-2026-54448

JSON object : View

Products Affected

aquasec

trivy

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

CWE-789

Memory Allocation with Excessive Size Value

{"id": "CVE-2026-54448", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-54448", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-25T18:55:22.152737Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "aquasecurity", "product": "trivy", "versions": [{"status": "affected", "version": "< 0.71.0"}]}]}], "published": "2026-06-25T17:16:41.257", "references": [{"url": "https://github.com/aquasecurity/trivy/pull/10718", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/aquasecurity/trivy/security/advisories/GHSA-q3fv-x8vg-qqm4", "tags": ["Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/aquasecurity/trivy/pull/10718", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}, {"url": "https://github.com/aquasecurity/trivy/security/advisories/GHSA-q3fv-x8vg-qqm4", "tags": ["Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-770"}, {"lang": "en", "value": "CWE-789"}]}], "descriptions": [{"lang": "en", "value": "Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive (.tgz), its custom tar unpacker reads each entry with io.ReadAll(tr) and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to gigabytes, causing the Trivy process to be killed by the OS OOM killer. This vulnerability is fixed in 0.71.0."}, {"lang": "es", "value": "Trivy es un esc\u00e1ner de seguridad. Antes de la versi\u00f3n 0.71.0, cuando Trivy escanea un archivo de gr\u00e1fico Helm (.tgz), su descompresor tar personalizado lee cada entrada con io.ReadAll(tr) y sin l\u00edmite de tama\u00f1o. Un atacante que puede colocar un archivo .tgz malicioso en la ruta escaneada puede crear un archivo comprimido peque\u00f1o que se descomprime a gigabytes, lo que provoca que el proceso de Trivy sea terminado por el \u2019OOM killer\u2019 del sistema operativo. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 0.71.0."}], "lastModified": "2026-10-25T22:10:00.150", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:aquasec:trivy:*:*:*:*:*:go:*:*", "vulnerable": true, "matchCriteriaId": "24B47F67-AC9B-462F-A704-7138E5CEE8BA", "versionEndExcluding": "0.71.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}