CVE-2026-24842

CVE-2026-24842 is a path traversal vulnerability affecting node-tar versions prior to 7.5.7, allowing an attacker to create hardlinks to arbitrary files outside the intended extraction directory. This high-severity vulnerability (CVSS 8.2) can be exploited remotely with low complexity, requiring user interaction, potentially leading to high confidentiality impact. While there is no known active exploitation or public exploit code, the vulnerability has received some community attention, with a fix available in version 7.5.7.