Vulnerability Description
Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh, rcp.sh and jcp.sh subcommands that allows jailed users to escape jail isolation. Attackers inside a jail can plant symlinks pointing to host paths or other jail roots, so administrator-run copies overwrite or read host files with root privileges.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/BastilleBSD/bastille
- https://github.com/BastilleBSD/bastille/blob/1.4.4/usr/local/share/bastille/cp.s
- https://github.com/BastilleBSD/bastille/commit/accc246ba92602c355afc66d0d8b9d432
- https://github.com/BastilleBSD/bastille/issues/1673
- https://www.vulncheck.com/advisories/bastille-through-1.4.4-jail-escape-via-syml
FAQ
What is CVE-2026-119704?
CVE-2026-119704 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh, rcp.sh and jcp.sh subcommands that allows jailed users to escape jail isolation. Attackers inside a jail can plant symli...
How severe is CVE-2026-119704?
CVE-2026-119704 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-119704?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.