CVE-2026-5704

CVE-2026-5704 is a file injection vulnerability in tar that allows attackers to bypass pre-extraction inspection mechanisms by crafting malicious archives containing hidden files with attacker-controlled content. This flaw potentially enables unauthorized introduction of malicious files onto systems without detection during the extraction process. The vulnerability is rated CVSS 5.5 MEDIUM severity with a local attack vector requiring user interaction but no special privileges. While the confidentiality impact is none, the integrity impact is rated high, meaning successful exploitation could compromise system integrity through the injection of unauthorized files. There is no current evidence of active exploitation. The vulnerability does not appear on the Known Exploited Vulnerabilities (KEV) catalog and remains inactive on threat tracking lists. The extremely low EPSS score of 0.000320000 indicates minimal real-world exploitation activity compared to other disclosed vulnerabilities, suggesting this remains a low-priority concern despite its integrity impact.