CVE-2026-103754

A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod() and utime() to an unsanitized filesystem path derived from the archive member name. A crafted archive processed by a worker that consumes attacker-influenced input can create files, create symbolic links, or change permissions outside the intended target directory, which can be leveraged toward code execution.

• CWE-22

• https://access.redhat.com/security/cve/CVE-2026-103754
• https://bugzilla.redhat.com/show_bug.cgi?id=2544510
• https://github.com/ansible/ansible-runner/pull/1550

Published

Oct 1, 2026

Last Modified

Oct 1, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-103680A flaw was found in tnef. A heap-based buffer overflow can o…3.1
• CVE-2026-103686A flaw has been found in rhukster dom-sanitizer up to 1.0.15…3.5
• CVE-2026-103687A vulnerability has been found in rhukster dom-sanitizer up …7.3
• CVE-2026-103690A flaw has been found in itsourcecode Leave Management Syste…6.3
• CVE-2026-1037IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2…6.1
• CVE-2026-103752Unauthenticated Privilege Escalation in Authorizer <= 3.15.3…9.8
• CVE-2026-103757Budibase through 3.41.0 contains a server-side request forge…7.7
• CVE-2026-103758Obot 0.21.1 through 0.24.1 contains an authorization bypass …8.1
• CVE-2026-103760Mooncake transfer engine through 0.3.13.post1 contains a den…5.9
• CVE-2026-103761Mooncake transfer engine through 0.3.13.post1 contains a mem…7.5
• CVE-2026-103764Mooncake transfer engine before 0.3.13 contains an untrusted…9.8
• CVE-2026-103765Mooncake through 0.3.13.post1 contains a missing authenticat…9.4