{"items":[{"id":"NVI-00015154","kind":"vulnerability","title":"Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive","revision":2,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected.","NVD lastModified does not establish freshness of every associated CPE record."],"lifecycle":"active","identifiers":["GHSA-f42x-p2mx-hm8r","CVE-2026-50558"],"plain_summary":"GitHub lists this reviewed advisory for penelope-shell-handler. Published version ranges and source prerequisites are shown below; this is not an inspection of a visitor’s application.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-390c2ff82ca1d5682c1fe1a9f5e9e879"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-07-29T15:34:16.000Z","value":"5.9 medium","meaning":"GitHub source severity; exploitability and local consequence require separate evidence.","source_id":"sr-3017b4da09c6d9b0a639638592915954"},{"kind":"CVSS","as_of":"2026-10-23T23:10:00.157Z","value":"5.9 MEDIUM (3.1)","meaning":"security-advisories@github.com severity; no combined Null risk score.","source_id":"sr-390c2ff82ca1d5682c1fe1a9f5e9e879"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-3017b4da09c6d9b0a639638592915954","url":"https://github.com/advisories/GHSA-f42x-p2mx-hm8r","basis":"vendor_advisory","notes":"GitHub Advisory Database; CC-BY-4.0. Each advisory links its original attribution. Null normalizes fields.","title":"GHSA-f42x-p2mx-hm8r","publisher":"GitHub Advisory Database","observed_at":"2026-11-03T09:59:04.660Z"},{"id":"sr-390c2ff82ca1d5682c1fe1a9f5e9e879","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50558","basis":"official_catalog","notes":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","title":"CVE-2026-50558","publisher":"NIST National Vulnerability Database","observed_at":"2026-11-08T01:47:57.993Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-3017b4da09c6d9b0a639638592915954"],"technology":"penelope-shell-handler","known_exclusions":[],"conditions_summary":"### Summary\n\nPenelope versions prior to 0.19.3 extracted tar archives received from remote sessions without validating archive member paths. When using the affected Unix download path, a malicious or compromised remote session could return a crafted tar archive containing path traversal entries, such as `../`, causing files to be written outside the intended download directory on the Penelope operator's machine.\n\nThe impact is limited to files writable by the user running Penelope. In some cases, this arbitrary file write could be chained to operator-side code execution if the attacker can overwrite a file that Penelope or the user later executes, such as `~/.penelope/peneloperc`. The issue has been fixed in version 0.19.3 by rejecting unsafe archive paths during extraction.\n\n### Affected conditions\n\nThe issue requires the operator to use the Main Menu `download` command to download files from a malicious or compromised remote session that can influence the tar archive returned to Penelope. The Python agent download path is not affected in the same way because it does not rely on the remote `tar` command.\n\nThe vulnerable behavior is related to Python's historical `tarfile` extracti","public_affected_ranges":["< 0.20.0"]}],"null_published_at":"2026-11-08T19:53:44.049Z","source_updated_at":"2026-07-29T15:34:16.000Z","source_disclosed_at":"2026-07-29T15:34:16.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"Source facts changed; compare the preserved prior revision.","null_first_observed_at":"2026-11-03T09:59:04.660Z"},{"id":"NVI-00015154","kind":"vulnerability","title":"Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive","revision":1,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected."],"lifecycle":"active","identifiers":["GHSA-f42x-p2mx-hm8r","CVE-2026-50558"],"plain_summary":"GitHub lists this reviewed advisory for penelope-shell-handler. Published version ranges and source prerequisites are shown below; this is not an inspection of a visitor’s application.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-3017b4da09c6d9b0a639638592915954"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-07-29T15:34:16.000Z","value":"5.9 medium","meaning":"GitHub source severity; exploitability and local consequence require separate evidence.","source_id":"sr-3017b4da09c6d9b0a639638592915954"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-3017b4da09c6d9b0a639638592915954","url":"https://github.com/advisories/GHSA-f42x-p2mx-hm8r","basis":"vendor_advisory","notes":"GitHub Advisory Database; CC-BY-4.0. Each advisory links its original attribution. Null normalizes fields.","title":"GHSA-f42x-p2mx-hm8r","publisher":"GitHub Advisory Database","observed_at":"2026-11-03T09:59:04.660Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-3017b4da09c6d9b0a639638592915954"],"technology":"penelope-shell-handler","known_exclusions":[],"conditions_summary":"### Summary\n\nPenelope versions prior to 0.19.3 extracted tar archives received from remote sessions without validating archive member paths. When using the affected Unix download path, a malicious or compromised remote session could return a crafted tar archive containing path traversal entries, such as `../`, causing files to be written outside the intended download directory on the Penelope operator's machine.\n\nThe impact is limited to files writable by the user running Penelope. In some cases, this arbitrary file write could be chained to operator-side code execution if the attacker can overwrite a file that Penelope or the user later executes, such as `~/.penelope/peneloperc`. The issue has been fixed in version 0.19.3 by rejecting unsafe archive paths during extraction.\n\n### Affected conditions\n\nThe issue requires the operator to use the Main Menu `download` command to download files from a malicious or compromised remote session that can influence the tar archive returned to Penelope. The Python agent download path is not affected in the same way because it does not rely on the remote `tar` command.\n\nThe vulnerable behavior is related to Python's historical `tarfile` extracti","public_affected_ranges":["< 0.20.0"]}],"null_published_at":"2026-11-03T10:03:26.554Z","source_updated_at":"2026-07-29T15:34:16.000Z","source_disclosed_at":"2026-07-29T15:34:16.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"First indexed by Null; source disclosure date is shown separately.","null_first_observed_at":"2026-11-03T09:59:04.660Z"}],"next_cursor":null,"snapshot_revision":"42594"}