CVE-2020-7669

CVE-2020-7669 is a high-severity path traversal vulnerability affecting all versions of the github.com/u-root/u-root/pkg/tarutil package. This flaw allows attackers to extract files to arbitrary locations on a system by manipulating relative paths within a tar archive, potentially leading to data corruption or system compromise. With a CVSS score of 7.5, this vulnerability is easily exploitable over a network with low attack complexity and no user interaction required. While there is no evidence of active exploitation, nor publicly available exploit code, the lack of community discussion and media coverage is typical for most CVEs.