CVE-2026-82455

RubyGems is vulnerable due to improper validation of path containment after resolving filesystem symlinks during gem extraction, allowing extracted files to be written outside the intended destination directory. This can lead to unauthorized file access or modification, potentially compromising system integrity. Organizations using RubyGems, particularly those managing sensitive data or critical applications, should prioritize addressing this vulnerability to mitigate risks associated with file system exposure.