CVE-2026-102282
HighAdvisory
Published 29 Sept 2026In the index since 30 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.1
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 62
- of 17,957 indexed, latest versions
- Container images
- 52
- deployed by those charts
- Fix available
- 1 of 1
- affected package
adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
Carried by container images the latest versions of 62 of 17,957 indexed charts deploy, on 52 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| adm-zipnpm | 0.4.11, 0.4.13, 0.4.16, 0.5.3+9 more | 0.6.1 | 52 |
- OSV records
- GHSA-j5f4-cc29-5x44
Charts affected
62 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| joplin-serverschoenwald | 1.0.3 | 1 of 1See more | 2,858 |
| infisicalsinextraVerified publisher | 0.6.0 | 1 of 1See more | 3,603 |
| trudesktechpreta | 1.0.0 | 1 of 3See more | 4,267 |
| chatqnatest-opea | 1.0.0 | 1 of 11See more | 41,947 |
| redis-vector-dbtest-opea | 1.0.0 | 1 of 1See more | 6,111 |
| vehicle-dashboardtest-vehi-dash | 0.1.0 | 1 of 7See more | 21,257 |
| thanhvt27-lab-k8sthanh-vtVerified publisher | 0.1.4 | 1 of 5See more | 4,907 |
| joplintobiassackmann | 0.1.7 | 1 of 2See more | 6,149 |
| homarrvhdirkVerified publisher | 0.1.5 | 1 of 1See more | 2,919 |
| tdarrvhdirkVerified publisher | 5.0.5 | 1 of 2See more | 166,746 |
| colanodevictorlane | 0.3.3 | 1 of 3See more | 2,529 |
| n8nvictorlane | 1.0.18 | 1 of 1See more | 7,015 |
Container images carrying it
52 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| redis/ | b5e19ee240ab | adm-zip | 0.6.1 | 4 |
| joplin/ | 3f7b852959aa | adm-zip | 0.6.1 | 3 |
| etherpad/ | 98d395769b3b | adm-zip | 0.6.1 | 2 |
| ethersphere/ | 0558799ca992 | adm-zip | 0.6.1 | 2 |
| gjeanmart/ | 926264c8f2d1 | adm-zip | 0.6.1 | 2 |
| n8nio/ | 14c4285bc303 | adm-zip | 0.6.1 | 2 |
| redis/ | 1c5f43fddcdd | adm-zip | 0.6.1 | 2 |
| ghcr.io/ | ce4d58724e25 | adm-zip | 0.6.1 | 2 |
| aktosecurity/ | 853e37321e6e | adm-zip | 0.6.1 | 1 |
| assistiot/ | 7473d77448e1 | adm-zip | 0.6.1 | 1 |
| chibisafe/ | 3da4fcbc1a18 | adm-zip | 0.6.1 | 1 |
| decayofmind/ | 1e18e92fe694 | adm-zip | 0.6.1 | 1 |
| diygod/ | 22845ada2f14 | adm-zip | 0.6.1 | 1 |
| ethereumoptimism/ | e07968a0e686 | adm-zip | 0.6.1 | 1 |
| ethersphere/ | 7624f11a72ad | adm-zip | 0.6.1 | 1 |
| gristlabs/ | 6e71b1914a7e | adm-zip | 0.6.1 | 1 |
| haveagitgat/ | 3ff0913202dd | adm-zip | 0.6.1 | 1 |
| heywood8/ | 0bc9ab313d37 | adm-zip | 0.6.1 | 1 |
| ibarreche/ | c8970ac1c8dc | adm-zip | 0.6.1 | 1 |
| infisical/ | 02082bf13163 | adm-zip | 0.6.1 | 1 |
| infisical/ | 3365445909be | adm-zip | 0.6.1 | 1 |
| kyso/ | e52595c5c16f | adm-zip | 0.6.1 | 1 |
| library/ | 767230c0f263 | adm-zip | 0.6.1 | 1 |
| markdegroot/ | d8445f2a0de6 | adm-zip | 0.6.1 | 1 |
| minddocdev/ | 6c60b11a4fa7 | adm-zip | 0.6.1 | 1 |
| n8nio/ | 761374d4eb84 | adm-zip | 0.6.1 | 1 |
| n8nio/ | 8b39ed5a2de9 | adm-zip | 0.6.1 | 1 |
| n8nio/ | 9f693fd55655 | adm-zip | 0.6.1 | 1 |
| n8nio/ | cfe2704ff858 | adm-zip | 0.6.1 | 1 |
| n8nio/ | dd171d45102a | adm-zip | 0.6.1 | 1 |
| n8nio/ | ed16e560c40e | adm-zip | 0.6.1 | 1 |
| n8nio/ | fdce8f852ac7 | adm-zip | 0.6.1 | 1 |
| polonel/ | 0cf6513f6fe3 | adm-zip | 0.6.1 | 1 |
| redis/ | 019fcf774631 | adm-zip | 0.6.1 | 1 |
| redis/ | 55542a762210 | adm-zip | 0.6.1 | 1 |
| redis/ | 699d341bd329 | adm-zip | 0.6.1 | 1 |
| redis/ | 85562d67a912 | adm-zip | 0.6.1 | 1 |
| rocketadmin/ | 10955ef540b9 | adm-zip | 0.6.1 | 1 |
| samajh/ | ea742b4372ad | adm-zip | 0.6.1 | 1 |
| sbs20/ | dad1fd6e9a98 | adm-zip | 0.6.1 | 1 |
| snyk/ | fb5ad76ce84e | adm-zip | 0.6.1 | 1 |
| sqlpad/ | d3d2f430dffd | adm-zip | 0.6.1 | 1 |
| treskon/ | e7970783bc8d | adm-zip | 0.6.1 | 1 |
| ghcr.io/ | 737ec361ed24 | adm-zip | 0.6.1 | 1 |
| ghcr.io/ | e103abadfb52 | adm-zip | 0.6.1 | 1 |
| ghcr.io/ | 7006cac874fd | adm-zip | 0.6.1 | 1 |
| ghcr.io/ | f683541d5374 | adm-zip | 0.6.1 | 1 |
| ghcr.io/ | 4b22b4f407c4 | adm-zip | 0.6.1 | 1 |
| ghcr.io/ | fa429df90c68 | adm-zip | 0.6.1 | 1 |
| ghcr.io/ | 26bbd45110d5 | adm-zip | 0.6.1 | 1 |