CVE-2026-71267

Summary

The flaw allows an attacker to overwrite critical data on the stack by supplying a long entry name, potentially leading to remote code execution.

Exploitability

Exploitation is relatively easy given that no input validation is performed before copying the string into a fixed-size buffer.

Blast radius

If exploited, this could lead to full system compromise, as it affects core file handling functions.

Prioritized remediation

Update microtar to a patched version or apply a fix that properly validates and limits the length of input names.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.