CVE-2026-109375

Received Received - Intake

Vercel DeepSec Link Following in extractTarballLocally

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulnCheck

Description

Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs. Attackers controlling sandbox code, such as a prompt-injected coding agent, can plant symbolic or hard links in the host data directory to write arbitrary files on the orchestrator host.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-109375

Affected Vendors & Products

Vendor	Product	Version / Range
Vercel	deepsec	0.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-59	The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Vercel deepsec versions 0.1.0 to 1.1.17. It allows sandboxed code to escape its sandbox by writing files outside it through symbolic or hard links planted in result tarballs. Attackers with control over sandboxed code, such as a compromised coding agent, can manipulate these links to write arbitrary files on the host system.

Detection Guidance

Detecting this vulnerability requires checking for vulnerable versions of Vercel deepsec. Inspect installed packages with commands like 'npm list deepsec' or 'yarn list deepsec' to verify if the version is below 1.1.17.

Impact Analysis

If exploited, this vulnerability could allow an attacker to write malicious files to sensitive locations on your system. This might lead to unauthorized code execution, data theft, or system compromise. Systems relying on Vercel deepsec for sandboxing could be at risk of breaches or further attacks originating from the host.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, violating GDPR's data integrity and confidentiality requirements or HIPAA's safeguards for protected health information. Compliance may be compromised if the vulnerability enables data breaches or unauthorized system access.

Mitigation Strategies

Immediately update Vercel deepsec to version 1.1.17 or later. Remove any untrusted sandboxed code or agents that could manipulate tarballs. Review file system permissions to restrict write access outside intended directories.

Hi! I’m here to help you understand CVE-2026-109375. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70