node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

🗓️ 19 May 2026 09:16:01Reported by RedHatType

Race condition in tar path reservations on case insensitive file systems enables arbitrary file overwrite via Unicode path collisions.

Reporter	Title	Published	Views	Family All 98
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway	2 Feb 202614:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tar-6.2.1.tgz	13 Apr 202613:07	–	ibm
IBM Security Bulletins	Security Bulletin: Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	14 Jul 202612:55	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for April 2026.	5 May 202621:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	27 Mar 202616:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to arbitrary code execution, loss of confidentiality and denial of service	6 May 202613:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	18 May 202606:56	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses tar-7.4.3.tgz which is vulnerable to CVE-2026-23745 and CVE-2026-23950.	31 Mar 202613:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Watsonx BI Assistant for CP4D	27 Apr 202616:13	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities have been found in IBM Verify Identity Access Digital Credentials	31 Mar 202600:38	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	10	x86_64	linux-sgx-debuginfo	0:2.26-7.el10	linux-sgx-debuginfo-0:2.26-7.el10.x86_64.rpm
Red Hat Enterprise Linux	10	x86_64	linux-sgx-debugsource	0:2.26-7.el10	linux-sgx-debugsource-0:2.26-7.el10.x86_64.rpm
Red Hat Enterprise Linux	10	x86_64	sgx-common	0:2.26-7.el10	sgx-common-0:2.26-7.el10.x86_64.rpm
Red Hat Enterprise Linux	10	x86_64	sgx-enclave-devel-debuginfo	0:2.26-7.el10	sgx-enclave-devel-debuginfo-0:2.26-7.el10.x86_64.rpm
Red Hat Enterprise Linux	10	x86_64	sgx-libs	0:2.26-7.el10	sgx-libs-0:2.26-7.el10.x86_64.rpm
Red Hat Enterprise Linux	10	x86_64	sgx-libs-debuginfo	0:2.26-7.el10	sgx-libs-debuginfo-0:2.26-7.el10.x86_64.rpm
Red Hat Enterprise Linux	10	x86_64	sgx-mpa	0:2.26-7.el10	sgx-mpa-0:2.26-7.el10.x86_64.rpm
Red Hat Enterprise Linux	10	x86_64	sgx-mpa-debuginfo	0:2.26-7.el10	sgx-mpa-debuginfo-0:2.26-7.el10.x86_64.rpm
Red Hat Enterprise Linux	10	x86_64	sgx-pccs	0:2.26-7.el10	sgx-pccs-0:2.26-7.el10.x86_64.rpm
Red Hat Enterprise Linux	10	x86_64	sgx-pccs-admin	0:2.26-7.el10	sgx-pccs-admin-0:2.26-7.el10.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-23950
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6
github	www.github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23950
cve	www.cve.org/CVERecord

13 Jul 2026 11:02Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.9 - 8.8

EPSS0.00233

SSVC

CWE-367