CVE-2026-101894 | XhmikosR decompress prior 10.2.2/11.1.4 Symlink input/output path traversal

A vulnerability classified as critical was found in XhmikosR decompress. The impacted element is the function decompress of the component Symlink. Such manipulation of the argument input/output leads to path traversal.

This vulnerability is referenced as CVE-2026-101894. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More