{"vulnerability": "cve-2026-54727", "sightings": [{"uuid": "1f6068ec-2668-41a4-a7d0-f60edb36e7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54727", "type": "seen", "source": "https://gist.github.com/alon710/0b988f8772f0747494691334f261cc01", "content": "# CVE-2026-54727: CVE-2026-54727: Container Isolation Bypass in proot-distro via Malicious Restore Archive\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54727\n\n## Summary\nA container isolation bypass vulnerability exists in proot-distro prior to version 5.1.6. The utility accepted hardlink entries pointing outside the container directory being restored, allowing cross-container file read and write capabilities.\n\n## TL;DR\nA container boundary bypass in proot-distro allows a malicious restore archive to read or write files inside other isolated containers on the device.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-668\n- **Attack Vector**: Local\n- **CVSS Score**: 8.2 (High)\n- **Impact**: Cross-container read and write access\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- proot-distro\n- **proot-distro**: < 5.1.6 (Fixed in: `5.1.6`)\n\n## Mitigation\n\n- Keep proot-distro updated to the latest version via Termux package management\n- Do not restore unauthenticated, third-party, or untrusted container backup archives\n- Enforce static analysis or pre-extraction checks on backup tarballs\n\n**Remediation Steps:**\n1. Execute 'pkg update && pkg upgrade proot-distro' to upgrade to v5.1.6 or later\n2. Audit any existing container layouts or verify nested hardlink/symlink properties\n3. Configure automated package scanners to flag outdated variants of proot-distro\n\n## References\n\n- [GitHub Security Advisory (GHSA-7h3g-4w2f-fj2f)](https://github.com/termux/proot-distro/security/advisories/GHSA-7h3g-4w2f-fj2f)\n- [proot-distro v5.1.6 Release Notes](https://github.com/termux/proot-distro/releases/tag/v5.1.6)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54727) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T00:32:17.081266Z"}, {"uuid": "2cddd804-6c03-4d60-b0fd-fe175801c35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54727", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiee5rkj2b", "content": "CVE-2026-54727 - proot-distro has a Container Isolation Bypass via Crafted Restore Archive\nCVE ID : CVE-2026-54727\n \n Published : July 29, 2026, 5:16 p.m. | 27\u00a0minutes ago\n \n Description : proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-d...", "creation_timestamp": "2026-07-29T17:49:55.419980Z"}, {"uuid": "64c13977-1c9f-43a1-857f-135d8130169b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54727", "type": "published-proof-of-concept", "source": "https://github.com/termux/proot-distro/security/advisories/GHSA-7h3g-4w2f-fj2f", "content": "", "creation_timestamp": "2026-07-29T18:35:08.632639Z"}]}