Exploitation Summary
EIP tracks 1 public exploit for CVE-2026-56876. PoCs published by ziad626.
AI-analyzed exploit summary This PoC demonstrates a zip slip vulnerability (CVE-2026-56876) where a maliciously crafted ZIP file containing a symlink with an absolute path (e.g., /etc/passwd) can bypass extraction path restrictions, allowing arbitrary file read outside the intended directory.
Description
extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like '../../../../etc/passwd', extract-zip will extract the symlink without validation, allowing it to point outside the extraction directory. Depending on how extract-zip is used, an attacker could read or write to arbitrary files.
Exploits (1)
This PoC demonstrates a zip slip vulnerability (CVE-2026-56876) where a maliciously crafted ZIP file containing a symlink with an absolute path (e.g., /etc/passwd) can bypass extraction path restrictions, allowing arbitrary file read outside the intended directory.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N