CyberRota Analysis
AI-GeneratedProot-distro versions prior to 5.1.6 are vulnerable to a flaw that allows crafted restore archives to copy files between isolated containers due to inadequate verification of hardlink entries. This could lead to unauthorized access to sensitive data across different container environments. Organizations utilizing proot-distro for container management should prioritize upgrading to version 5.1.6 to mitigate potential data leakage risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a crafted restore archive to copy files between otherwise isolated containers. This issue is fixed in version 5.1.6.