CVE-2026-40090: Path Traversal in Zarf Package Inspection

The vulnerability lies in how Zarf constructs output file paths when inspecting packages. Specifically, the Metadata.Name field, which is attacker-controlled data read from the package archive, is used to build the output file path. While this field undergoes regex validation during package creation (^[a-z0-9][a-z0-9\-]*$), it doesn't prevent an attacker from crafting a malicious package that, when inspected, leads to the creation of files in unexpected locations. An attacker could leverage this to read sensitive configuration files, source code, or other data from the system running Zarf. The blast radius is limited to the system executing the zarf command, but the potential for data exposure is significant.

1. Reserved2026-04-09
2. Published2026-04-14
3. Modified2026-04-15
4. EPSS updated2026-04-22

The primary mitigation is to upgrade Zarf to version 0.74.2 or later, which includes the fix for this vulnerability. If upgrading is not immediately feasible, a temporary workaround is to avoid inspecting unsigned packages. This significantly reduces the attack surface by preventing the inspection of potentially malicious artifacts. Consider implementing stricter package signing policies to ensure that only trusted packages are inspected. There are no specific WAF or proxy rules that directly address this vulnerability, as it's a local command execution issue. Detection signatures are challenging to create without specific file path patterns, but monitoring for unusual file creation activity during package inspection could be beneficial.