CVE-2019-14866

CVE-2019-14866 is a high-severity vulnerability affecting GNU cpio and Red Hat Enterprise Linux versions prior to 2.13. It allows an attacker to craft malicious input files that, when used to create TAR archives, can result in files with elevated permissions or in unauthorized paths within the archive. This vulnerability has a CVSS score of 7.3, indicating a local attack vector with low complexity, requiring user interaction, and potentially leading to high confidentiality, integrity, and availability impacts if a high-privilege user extracts the archive without review. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.