High
Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts
Type: advisorySources: OSV
Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a crafted annotation that resolves to a path outside the intended destination, causing Trivy to write the layer content to an arbitrary location on the host filesystem. This vulnerability is fixed in 0.71.1.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-55092
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 8 Nov 2026, 01:46 UTC · Revision 1
Source evidence
Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts
core-osv · Original sourcePublished 25 Jun 2026, 16:26 UTC
Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a crafted annotation that resolves to a path outside the intended destination, causing Trivy to write the layer content to an arbitrary location on the host filesystem. This vulnerability is fixed in 0.71.1.
osv:CVE-2026-55092
Complete source record
{
"id": "bfe182725e9782343d01785093b9ad2179764c7a415f1d34ebadca22a5a7b7d9",
"url": "https://osv.dev/vulnerability/CVE-2026-55092",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts",
"summary": "Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a crafted annotation that resolves to a path outside the intended destination, causing Trivy to write the layer content to an arbitrary location on the host filesystem. This vulnerability is fixed in 0.71.1.",
"evidence": "osv:CVE-2026-55092",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2026-55092",
"aliases": [
"CVE-2026-55092",
"GHSA-mcj4-mphf-j9ff",
"GO-2026-6294"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/aquasecurity/trivy",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "164b383121351c2d49c5d354c2245719d972752b"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "0.71.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"cpe": "cpe:2.3:a:aquasec:trivy:*:*:*:*:*:go:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "0.71.1"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v0.71.0",
"v0.70.0",
"v0.69.0",
"v0.68.1",
"v0.68.0",
"v0.67.0",
"v0.66.0",
"v0.65.0",
"v0.64.0",
"v0.63.0",
"v0.62.0",
"v0.61.0",
"v0.60.0",
"v0.59.0",
"v0.58.0",
"v0.57.0",
"v0.56.0",
"v0.55.0",
"v0.54.0",
"v0.53.0",
"v0.52.0",
"v0.51.1",
"v0.51.0",
"v0.50.1",
"v0.50.0",
"v0.49.1",
"v0.49.0",
"v0.48.2",
"v0.48.1",
"v0.43.1",
"v0.48.0",
"v0.47.0",
"v0.46.0",
"v0.45.1",
"v0.45.0",
"v0.44.1",
"v0.44.0",
"v0.43.0",
"v0.42.1",
"v0.42.0",
"v0.41.0",
"v0.40.0",
"v0.39.1",
"v0.39.0",
"v0.38.3",
"v0.38.2",
"v0.38.1",
"v0.38.0",
"v0.37.3",
"v0.37.2",
"v0.37.1",
"v0.37.0",
"v0.36.1",
"v0.36.0",
"v0.35.0",
"v0.34.0",
"v0.33.0",
"v0.32.1",
"v0.32.0",
"v0.31.3",
"v0.31.2",
"v0.31.1",
"v0.31.0",
"v0.30.4",
"v0.30.3",
"v0.30.2",
"v0.30.1",
"v0.30.0",
"v0.29.2",
"v0.29.1",
"v0.29.0",
"v0.28.1",
"v0.28.0",
"v0.27.1",
"v0.27.0",
"v0.26.0",
"v0.25.4",
"v0.25.3",
"v0.25.2",
"v0.25.1",
"v0.25.0",
"v0.24.4",
"v0.24.3",
"v0.24.2",
"v0.24.1",
"v0.24.0",
"v0.23.0",
"v0.22.0",
"v0.21.3",
"v0.21.2",
"v0.21.1",
"v0.21.0",
"v0.20.2",
"v0.20.1",
"v0.20.0",
"v0.19.2",
"v0.19.1",
"v0.19.0",
"v0.18.3",
"v0.18.2",
"v0.18.1",
"v0.18.0",
"v0.17.2",
"v0.17.1",
"v0.17.0",
"v0.16.0",
"v0.15.0",
"v0.14.0",
"v0.13.0",
"v0.12.0",
"v0.11.0",
"v0.10.2",
"v0.10.1",
"v0.10.0",
"v0.9.2",
"v0.9.1",
"v0.9.0",
"v0.8.0",
"v0.7.0",
"v0.6.0",
"v0.5.4",
"v0.5.3",
"v0.5.2",
"v0.5.1",
"v0.5.0",
"v0.4.4",
"v0.4.3",
"v0.4.2",
"v0.4.1",
"v0.4.0",
"v0.3.1",
"v0.3.0",
"v0.2.1",
"v0.2.0",
"v0.1.7",
"v0.1.6",
"v0.1.5",
"v0.1.4",
"v0.1.3",
"v0.1.2",
"v0.1.1",
"v0.1.0",
"v0.0.16",
"v0.0.15",
"v0.0.14",
"v0.0.13",
"v0.0.12",
"v0.0.11",
"v0.0.10",
"v0.0.9",
"v0.0.8",
"v0.0.7",
"v0.0.6",
"v0.0.5",
"v0.0.4",
"v0.0.3",
"v0.0.2"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55092.json"
}
}
],
"modified": "2026-10-28T02:30:52.707481490Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55092.json",
"https://github.com/aquasecurity/trivy/security/advisories/GHSA-mcj4-mphf-j9ff",
"https://nvd.nist.gov/vuln/detail/CVE-2026-55092"
],
"provider_metadata": {
"cwe_ids": [
"CWE-22"
],
"cna_assigner": "GitHub_M",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55092.json"
}
},
"related_cves": [
{
"value": "CVE-2026-55092",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 521481,
"published_at": "2026-06-25T16:26:46.081+00:00"
}