CVE-2026-63328: Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write
Trivy is a security scanner. Prior to 0.72.0, plugin manifest metadata is used by pkg/plugin/manager.go to construct paths under ~/.trivy/plugins without confining plugin names to that root, allowing an attacker who persuades a user to install or run a malicious plugin to write the manifest and plugin binary to arbitrary user-writable paths, while plugins from the official Trivy plugin index are not affected. This issue is fixed in version 0.72.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Trivyto a version that resolves this vulnerability.Fixed in 0.72.0
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Users running Trivy versions earlier than 0.72.0 are exposed only if they install or run a malicious plugin. Plugins obtained from the official Trivy plugin index are not affected.
What does an attacker need to exploit the vulnerability?
An attacker must persuade the user to install or run a malicious plugin whose manifest contains crafted plugin metadata. The crafted metadata can cause the manifest and plugin binary to be written to arbitrary paths that the user can write to.
What should teams do if they cannot patch immediately?
Upgrade Trivy to version 0.72.0. If upgrading is not immediately possible, avoid installing or running plugins outside the official Trivy plugin index.