The vulnerability involves improper limitation of a pathname to a restricted directory during the extraction of operator catalog images by oc-mirror. Both legacy v1 (--v1) and OCI feature path (--use-oci-feature) methods are affected. The lack of validation allows crafted tar entries to write files outside the intended extraction directory, potentially leading to arbitrary file overwrite.

Successful exploitation could allow an attacker with local access to cause arbitrary file writes outside the intended directory, potentially leading to privilege escalation, data corruption, or denial of service. The CVSS 3.1 score is 7.3 (high), reflecting high confidentiality and integrity impact and low availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-101295 for current remediation guidance. Until a fix is applied, avoid running oc-mirror with untrusted operator catalog images or in untrusted environments.