The vulnerability exists in the buildah/copier Go package, which when used outside of Buildah by non-root callers, allows crafted tar archives containing malicious symbolic links to escape the target extraction directory. This can lead to files being created or overwritten outside the intended directory. Buildah itself is not affected due to its use of chroot hardening. The issue specifically affects scenarios where a macOS Podman remote client performs 'podman cp' operations against a malicious Podman system service server. Exploitation requires user interaction with a malicious server and is not applicable to typical container deployments on Red Hat Enterprise Linux.

An attacker can create or overwrite critical files outside the intended directory, potentially leading to unauthorized code execution, modification of files, exposure of sensitive data, or denial of service by corrupting critical files. The attack requires interaction with a malicious Podman system service server and is limited to non-root users using the vulnerable package outside of Buildah. Typical container deployments on Red Hat Enterprise Linux are not affected.

Users should ensure that 'podman cp' operations are only performed against trusted Podman system service servers. Avoid copying content from untrusted sources to prevent exposure to directory traversal vulnerabilities. No official patch or fix is indicated in the vendor advisory; thus, the primary mitigation is to restrict interactions to trusted servers.