CVE-2026-63328 Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write
Attackers can write arbitrary files via malicious plugin manifests, potentially leading to code execution or data modification in Trivy.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-63328?
CVE-2026-63328 is a medium-severity path traversal vulnerability in aquasecurity trivy, published on 18 Aug 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Trivy is a security scanner. Prior to 0.72.0, plugin manifest metadata is used by pkg/plugin/manager.go to construct paths under ~/.trivy/plugins without confining plugin names to that root, allowing an attacker who persuades a user to install or run a malicious plugin to write the manifest and plugin binary to arbitrary user-writable paths, while plugins from the official Trivy plugin index are not affected. This issue is fixed in version 0.72.0.
Weakness: CWE-22
Which versions are affected by CVE-2026-63328?
3 open source packages ship an affected version, including github.com/aquasecurity/trivy.
| Package | Affected | Fixed in |
|---|---|---|
github.com/aquasecurity/trivy Go | All versions | 0.72.0 |
github.com/aquasecurity/trivy Go | All versions | 0.72.0 |
github.com/aquasecurity/trivy Go | All versions | 0.72.0 |
How do I fix CVE-2026-63328?
Upgrade github.com/aquasecurity/trivy to 0.72.0 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-63328 being exploited?
There is no known exploitation of CVE-2026-63328 in the wild and no public exploit code.
Sources
Also known as GHSA-8rc5-4fr6-64pw, GO-2026-6250, MINI-3hq4-6mp3-88v7, MINI-4jjq-qr76-wc58, MINI-676g-m4jh-p2xh, MINI-7gpw-r6jv-p379 and 23 more.