Threats tagged 'ghsa-p84v-gxvw-73pf'

A Zip Slip vulnerability (CVE-2025-62156) exists in Argo Workflows versions prior to 3.6.12 and between 3.7.0 and before 3.7.3. The flaw occurs during artifact extraction where path traversal entries in tar.gz archives allow files to be written outside the intended extraction directory, specifically into system directories like /etc/. This enables attackers to overwrite critical configuration files within container environments. The vulnerability arises from improper path validation in the untar() function, which uses filepath.Join with cleaned but unchecked paths, allowing absolute paths to escape the extraction directory. A proof of concept demonstrates exploitation by uploading a crafted archive and mounting volumes to achieve file creation in /etc/.