CVE-2026-55092

Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a crafted annotation that resolves to a path outside the intended destination, causing Trivy to write the layer content to an arbitrary location on the host filesystem. This vulnerability is fixed in 0.71.1.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/aquasecurity/trivy/security/advisories/GHSA-mcj4-mphf-j9ff	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:aquasec:trivy:*:*:*:*:*:go:*:*

History

25 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Trivy es un escáner de seguridad. Antes de 0.71.1, cuando Trivy descarga un artefacto OCI, utiliza la anotación org.opencontainers.image.title del manifiesto del artefacto como nombre de archivo de destino sin validación. Un atacante que puede hacer que Trivy obtenga un artefacto controlado por el atacante puede proporcionar una anotación manipulada que se resuelve en una ruta fuera del destino previsto, haciendo que Trivy escriba el contenido de la capa en una ubicación arbitraria en el sistema de archivos del host. Esta vulnerabilidad se corrigió en 0.71.1.

Information

Published : 2026-06-25 17:16

Updated : 2026-10-25 22:10

NVD link : CVE-2026-55092

Mitre link : CVE-2026-55092

CVE.ORG link : CVE-2026-55092

JSON object : View

Products Affected

aquasec

trivy

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-55092", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-55092", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-26T02:07:47.309807Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.0, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "aquasecurity", "product": "trivy", "versions": [{"status": "affected", "version": "< 0.71.1"}]}]}], "published": "2026-06-25T17:16:41.647", "references": [{"url": "https://github.com/aquasecurity/trivy/security/advisories/GHSA-mcj4-mphf-j9ff", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a crafted annotation that resolves to a path outside the intended destination, causing Trivy to write the layer content to an arbitrary location on the host filesystem. This vulnerability is fixed in 0.71.1."}, {"lang": "es", "value": "Trivy es un esc\u00e1ner de seguridad. Antes de 0.71.1, cuando Trivy descarga un artefacto OCI, utiliza la anotaci\u00f3n org.opencontainers.image.title del manifiesto del artefacto como nombre de archivo de destino sin validaci\u00f3n. Un atacante que puede hacer que Trivy obtenga un artefacto controlado por el atacante puede proporcionar una anotaci\u00f3n manipulada que se resuelve en una ruta fuera del destino previsto, haciendo que Trivy escriba el contenido de la capa en una ubicaci\u00f3n arbitraria en el sistema de archivos del host. Esta vulnerabilidad se corrigi\u00f3 en 0.71.1."}], "lastModified": "2026-10-25T22:10:00.150", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:aquasec:trivy:*:*:*:*:*:go:*:*", "vulnerable": true, "matchCriteriaId": "8A55ED13-3975-4156-A94A-4237EE17FC79", "versionEndExcluding": "0.71.1"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}