CVE-2026-109375
Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction
Vercel deepsec
CVSS
4.9MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.32%Chance of exploitation activity in the next 30 days, higher than 24% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 1.1.17deepsecCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs. Attackers controlling sandbox code, such as a prompt-injected coding agent, can plant symbolic or hard links in the host data directory to write arbitrary files on the orchestrator host.
Text from CVE List
Affected versions 2
- deepsecaffected: 0.1.0 before 1.1.17CVE List
- deepsecunaffected: 1.1.17CVE List
References 5
- github.com/vercel-labs/deepsec/pull/46Fixvia CVE List
- github.com/vercel-labs/deepsec/pull/47Fixvia CVE List
- github.com/vercel-labs/deepsec/commit/c5a4e4220ece72aee67c2ea21f4340e65f673fc1Fixvia CVE List
- vulncheck.com/advisories/vercel-deepsec-before-1.1.17-arbitrary-file-write-via-symlink-in-sandbox-tarball-extractionAdvisoryvia CVE List
- github.com/vercel-labs/deepsecReferencevia CVE List