CVE-2026-108262 | DDEV up to 1.25.3 Untar pkg/archive/archive.go symlink

November 6, 2026 Yanac

A vulnerability labeled as problematic has been found in DDEV up to 1.25.3. This impacts an unknown function of the file pkg/archive/archive.go of the component Untar. The manipulation results in symlink following.

This vulnerability was named CVE-2026-108262. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More