Medium6.8Red Hat Linux

Medium [CVE-2026-32637] File path traversal allows overwriting sensitive files via malicious backup tarball.

This medium-severity Red Hat Linux advisory covers CVE-2026-32637 affecting Migration Toolkit for Containers, OpenShift API for Data Protection, Red Hat Advanced Cluster Management for Kubernetes 2.

CVE-2026-32637 Published Aug 25, 2026Updated by vendor Aug 25, 2026

CVE-2026-32637

Affected products & platforms

Red Hat LinuxUnclassified

Open vendor advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes.

Prior to 1.18.1, an attacker who compromises the backup object-storage backend can upload a malicious backup tarball containing parent-directory paths that escape the extraction directory during restore and overwrite sensitive files in the Velero pod filesystem. This issue is fixed in version 1.18.1.

This could lead to unauthorized modification of critical system files. Red Hat severity: Moderate — CVSS 6.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H).

Weakness: CWE-22. Affected Red Hat products: Migration Toolkit for Containers; OpenShift API for Data Protection; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat OpenShift Container Platform 4; Red Hat Openshift Data Foundation 4.

Red Hat does not currently list a fixing RHSA for this CVE.

Affected versions

< 1.18.1

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Fixed versions

1.18.1

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Mitigation

Upgrade to a fixed release: 1.18.1. That is the remediation for this advisory.

The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.