CVE-2026-62268

The borgbackup archiver is vulnerable to an out-of-tree file modification issue when extracting maliciously crafted archives. Specifically, the extract function may follow symlinks or resolve dot-dot (..) path components, allowing an attacker to delete or overwrite files outside the extraction di...