CVE-2026-40090

Zarf is an Airgap Native Packager Manager for Kubernetes. Versions 0.23.0 through 0.74.1 contain an arbitrary file write vulnerability in the zarf package inspect sbom and zarf package inspect documentation subcommands. These subcommands output file paths are constructed by joining a user-controlled output directory with the package's Metadata.Name field read directly from the untrusted package's zarf.yaml manifest. Although Metadata.Name is validated against a regex on package creation, an attacker can unarchive a package to modify the Metadata.Name field to contain path traversal sequences such as ../../etc/cron.d/malicious or absolute paths like /home/user/.ssh/authorized_keys, along with the corresponding files inside SBOMS.tar. This allows writing attacker-controlled content to arbitrary filesystem locations within the permissions of the user running the inspect command. This issue has been fixed in version 0.74.2.

• CWE-22

• https://github.com/zarf-dev/zarf/pull/4793Issue Tracking, Patch
• https://github.com/zarf-dev/zarf/security/advisories/GHSA-pj97-4p9w-gx3qPatch, Vendor Advisory

Published

Apr 15, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40084Cacti is an open source performance and fault management fra…6.5
• CVE-2026-40086Rembg is a tool to remove images background. Prior to 2.0.75…5.3
• CVE-2026-40087LangChain is a framework for building agents and LLM-powered…5.3
• CVE-2026-40088PraisonAI is a multi-agent teams system. Prior to 4.5.121, t…9.6
• CVE-2026-40089Sonicverse is a Self-hosted Docker Compose stack for live ra…9.9
• CVE-2026-4009A vulnerability has been found in jarikomppa soloud up to 20…3.3
• CVE-2026-40091SpiceDB is an open source database system for creating and m…4.4
• CVE-2026-40092nimiq-blockchain provides persistent block storage for Nimiq…7.5
• CVE-2026-40093nimiq-blockchain provides persistent block storage for Nimiq…8.1
• CVE-2026-40094nimiq-blockchain provides persistent block storage for Nimiq…4.3
• CVE-2026-40096immich is a high performance self-hosted photo and video man…5.4
• CVE-2026-40097Step CA is an online certificate authority for secure, autom…3.7