High severity · published Mar 6, 2026
CVE-2026-29064
Zarf: Symlink targets in archives are not validated against destination directory
8.2
CVSS
0.2%
EPSS
No
On KEV
Description
Zarf is an Airgap Native Packager Manager for Kubernetes. From version 0.54.0 to before version 0.73.1, a path traversal vulnerability in archive extraction allows a specifically crafted Zarf package to create symlinks pointing outside the destination directory, enabling arbitrary file read or write on the system processing the package. This issue has been patched in version 0.73.1.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZA
zarf · zarf-dev
>= 0.54.0, < 0.73.1 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-29064
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-29064
Product
https://github.com/zarf-dev/zarf/releases/tag/v0.73.1
Exploit
https://github.com/zarf-dev/zarf/security/advisories/GHSA-hcm4-6hpj-vghm
More from zarf
7.1
CVE-2026-40090
Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write