Trivy, a security scanner by aquasecurity, prior to version 0.72.0, improperly limits pathnames when handling plugin manifest metadata in pkg/plugin/manager.go. This allows an attacker to craft a malicious plugin that, when installed or run by a user, can write the manifest and plugin binary to arbitrary locations writable by the user, due to lack of confinement to the ~/.trivy/plugins directory. Official plugins from the Trivy plugin index are not vulnerable. The vulnerability is addressed in version 0.72.0.

An attacker who persuades a user to install or run a malicious plugin can write files to arbitrary user-writable paths on the system. This could lead to unauthorized file modification or code execution under the user's privileges. There is no indication of exploitation in the wild. The vulnerability requires user interaction and local access to run the malicious plugin.

Upgrade Trivy to version 0.72.0 or later, where this path traversal vulnerability is fixed. Until then, avoid installing or running untrusted plugins. There is no official vendor advisory specifying alternative mitigations.