proot-distro has 3 CVEs on record. 3 were published in the last 90 days. The busiest recent month was July 2026 with 3. The median CVSS is 8.2 (high).
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.2
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
3
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-54727High· 8.2proot-distro has a Container Isolation Bypass via Crafted Restore Archive45CVE-2026-54574High· 8.2`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive45GHSA-mfr4-mq8w-vmg6Medium· 6.6PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs36
proot-distro vulnerabilities
CVEs affecting proot-distro, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-54574High· 8.2`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive
`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive
▾ Twilightproot-distro · proot-distroEPSS 0.14%via GHSA
CVE-2026-54727High· 8.2proot-distro has a Container Isolation Bypass via Crafted Restore Archive
proot-distro has a Container Isolation Bypass via Crafted Restore Archive
▾ Twilightproot-distro · proot-distroEPSS 0.12%via GHSA
GHSA-mfr4-mq8w-vmg6Medium· 6.6PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs
PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs
▾ Sunlitproot-distro · proot-distrovia GHSA