{"uuid": "0bd6efbf-683a-4f96-97e0-c2ddbeea5f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7h3g-4w2f-fj2f", "type": "seen", "source": "https://gist.github.com/alon710/0b988f8772f0747494691334f261cc01", "content": "# CVE-2026-54727: CVE-2026-54727: Container Isolation Bypass in proot-distro via Malicious Restore Archive\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54727\n\n## Summary\nA container isolation bypass vulnerability exists in proot-distro prior to version 5.1.6. The utility accepted hardlink entries pointing outside the container directory being restored, allowing cross-container file read and write capabilities.\n\n## TL;DR\nA container boundary bypass in proot-distro allows a malicious restore archive to read or write files inside other isolated containers on the device.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-668\n- **Attack Vector**: Local\n- **CVSS Score**: 8.2 (High)\n- **Impact**: Cross-container read and write access\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- proot-distro\n- **proot-distro**: < 5.1.6 (Fixed in: `5.1.6`)\n\n## Mitigation\n\n- Keep proot-distro updated to the latest version via Termux package management\n- Do not restore unauthenticated, third-party, or untrusted container backup archives\n- Enforce static analysis or pre-extraction checks on backup tarballs\n\n**Remediation Steps:**\n1. Execute 'pkg update && pkg upgrade proot-distro' to upgrade to v5.1.6 or later\n2. Audit any existing container layouts or verify nested hardlink/symlink properties\n3. Configure automated package scanners to flag outdated variants of proot-distro\n\n## References\n\n- [GitHub Security Advisory (GHSA-7h3g-4w2f-fj2f)](https://github.com/termux/proot-distro/security/advisories/GHSA-7h3g-4w2f-fj2f)\n- [proot-distro v5.1.6 Release Notes](https://github.com/termux/proot-distro/releases/tag/v5.1.6)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54727) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T00:32:17.127882Z"}