medium5.9
CVE-2026-44788
SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant)
Impact
SharpCompress is a fully managed C# library to deal with many compression types and formats. In 0.47.4 and earlier, a path traversal vulnerability in IArchive.WriteToDirectory() allows a malicious archive to create directories outside the intended extraction root. For TAR archives, this can be escalated to arbitrary file writes by chaining with a symlink entry, giving a full write primitive on the target filesystem subject to the permissions of the running process.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | SharpCompress | < 0.48.0 | 0.48.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adamhathcock | Sharpcompress | through 0.47.4 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-6c8g-7p36-r338
- https://github.com/adamhathcock/sharpcompress/security/advisories/GHSA-6c8g-7p36-r338
- https://nvd.nist.gov/vuln/detail/CVE-2026-44788
- https://github.com/adamhathcock/sharpcompress/commit/2021a06626d0555a4d69471386e763ca5f5d5dfb