CVE-2026-115908

A flaw was found in the zip library. During archive extraction, the software fails to properly resolve intermediate symbolic links shortcuts pointing to other file locations, relying instead on superficial path comparisons. By providing a specially crafted archive, an attacker can bypass path...