A vulnerability described as critical has been identified in isaacs node-tar up to 7.5.9. This affects an unknown function. Such manipulation leads to path traversal.
This vulnerability is documented as CVE-2026-29786. The attack needs to be performed locally. There is not any exploit available.
Upgrading the affected component is recommended.
